Tuesday, 2023-01-17

clarkbmeeting time19:00
clarkb#startmeeting infra19:01
opendevmeetMeeting started Tue Jan 17 19:01:08 2023 UTC and is due to finish in 60 minutes.  The chair is clarkb. Information about MeetBot at http://wiki.debian.org/MeetBot.19:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.19:01
opendevmeetThe meeting name has been set to 'infra'19:01
clarkb#link https://lists.opendev.org/archives/list/service-discuss@lists.opendev.org/thread/MB3XWSVFXEROBXFXU5V3DX3D3QVMYLQR/ Our Agenda19:01
clarkb#topic Announcements19:01
clarkbI didn't have anything to announce. Did anyone else?19:02
funginothing particularly exciting, no19:02
clarkb#topic Topics19:03
clarkb#topic Bastion Host Updates19:03
clarkbI have a small update for ansible installation https://review.opendev.org/c/opendev/system-config/+/84333019:03
clarkbOld bridge is still up. But I expect we'll shut it down real soon now19:04
clarkbOther than that I think new bridge has been happy. Was there anything else to mention on this topic? Probably drop it from the weekly agenda once old bridge is shutdown19:05
ianw(sorry bouncer issues)19:05
clarkbianw: anything to add before we move onto the next item?19:06
ianwnot really, there's still some things with some backup changes, and possibly some work on the parallel running19:06
ianwi haven't looked at either lately though19:06
clarkboh right. I've been bad and mean to do reviews of those changes but keep getting distracted19:06
* clarkb makes a note on the todo list and maybe that will help19:07
fungiyeah, i had some down time over the holiday weekend and tried to dig into older system-config changes which have been growing stale19:07
clarkb#topic Mailman 319:08
fungiit would be good to get the parallel stuff finished19:08
clarkb++19:08
fungino progress on the mm3 front since last week's meeting19:08
clarkbfungi: lsat week I said feel free to reach out if we can help with the mailman 3 stuff. You've got changes but they are WIP'd. Anything new?19:08
clarkbah that answers that.19:09
clarkbAnything we can do to help move it along?19:09
fungibut year end/beginning paperwork is mostly wrapped up now, so i should have more time to get back to it19:09
clarkbsound good.19:10
ianwnot mailman3, but on mailman2 ...19:10
ianwit's currently in emergency with some custom apache rules19:10
fungioh, right, that's one thing that sucked up a bit of our collective time last week19:10
ianw#link https://review.opendev.org/c/opendev/system-config/+/86977919:11
clarkbI'll review that change after the meeting19:11
fungithanks!19:11
clarkbbut I guess we can remove the host from emergency once that lands?19:11
fungishould be able to, yes19:11
ianwwould allow us to codify those rules19:11
ianwwe'd have to make sure we define the current rules in the secrets for the host19:12
clarkbexcellent, ya I'll get on that as soon as the meeting is done19:12
ianwalthough, i'm not 100% sure if that issue is ongoing19:12
ianwanyway, can double check and we can discuss outside meeting19:13
clarkb#topic Quo vadis Storyboard19:14
clarkbThis is something i Just haven't had time to get to with all of the other paperwork and distractions. I'm hoping to be able to get to it at some point though19:14
clarkb#topic Gerrit 3.619:15
clarkb#link https://review.opendev.org/c/opendev/system-config/+/870118 Fix Gerrit 3.6 image build19:15
clarkbGerrit updated the bazel version they use which is stricter about checking some flogger logging code. This has resulted in one of the plugins we build erroring on the bazel build19:15
clarkbThe change above has us consume the latest version of that plugin which fixes the error. Looking at the difference between 3.6.3 and latest of that plugin I expect this to be safe19:16
clarkbThen separately I've got a stack of changes to drop gerrit 3.5 image builds and add 3.7 image builds and test all that19:16
clarkb#link https://review.opendev.org/c/opendev/system-config/+/869763 beginning of stack to remove 3.5 images and add 3.7 and associated testing.19:16
ianw++ will review19:17
clarkbprobably the most interesting bit of all that is the modifications to the upgrade testing to make the upgrade functional19:17
clarkbconverts Verified to a submit requirement dropping the function specification (the docs actually say we should set function to noop but they also say function is deprecated so I decided to try just not setting it and that appeas to work)19:18
clarkbbut ya its straightforward to start, the real fun will be as we test 3.7 more and figure out what all in our acls needs updating19:18
ianw++19:19
ianw... on that19:19
ianwas we found out late last week, we may have committed some bad ACL's and not noticed19:19
ianwfull details are at19:19
ianw#link https://etherpad.opendev.org/p/760YNeM5OEFS1hlr7bE519:19
ianwi think maybe if fungi could review that, i can take on doing an audit of where we're at, following the checklist in there, at some quiet time19:20
clarkbianw: my only other piece of feedback is that afte rremoving the cache file maybe we want to manually run the tool against a specific project or three just to be sure we don't have unexpected behavior with the cache file out of the way before we do it against everything19:21
clarkbotherwise lgtm19:21
fungii'll take a look, but may not have time until tomorrow19:21
ianwgood idea, actually it's probably better to do something like loop the project list and keep each in a separate log file.  i can make an update to the procedure 19:22
ianwi think manage-projects works by getting the list of all projects, but then filtering it by any command-line parameters, iirc from code inspection last week19:23
clarkbyes that sounds right19:23
clarkbSounds like that is all for Gerrit19:25
clarkb#topic Linaro Cloud Move19:25
clarkbThe new nb04 arm64 builder is up and running in osuosl and I think ianw mentioned the new linaro cloud is running jobs?19:25
clarkbEd emailed earlier today asking for an update. YOu can update us then copy paste into an email :)19:25
ianwi'm not sure on that -- a node did get allocated, but the wrong flavor :)  so there is some communication happening19:26
ianwbut yeah, nb04 has been my main focus and that seems to be working.  so i think we can get rid of nb03 to have one less thing in linaro19:26
ianwbut now i need to debug the node launches in the new cloud19:27
clarkbianw: one easy thing might be to rename the flavor if we can19:27
clarkbthe other idea I had was maybe we can set max-servers in the old linaro cloud to zero at this point?19:27
ianwoh that should be fixed -- by dropping the min-ram in the config, it makes it an exact match on the flavor name19:28
clarkbah19:28
ianwbut something is up with launching the nodes i'm not sure about yet, it seems, there's nothing running19:28
clarkbI see19:28
clarkbprobably a good idea to give ed that update. Basically we're close and shutting down resources in the old cloud just have to figure out new boots in the new cloud?19:29
ianwi'll have to dig through the logs.  i got a bit sidetracked because there's a ton of extra messages in there from a leaking node issue, that i had a fix for but now is in merge conflict with the new statemachine stuff :)19:29
ianwyep, i will respond, sorry haven't even opened emails yet :)19:29
clarkbthanks! and thank you for pushing this along19:29
ianwno worries, getting closer!  always interesting finding the things we didn't expect 19:30
clarkb#topic Upgrading Old Servers19:30
clarkbAs mentioned last week I didn't have any news and didn't expect to have news today. I don't. That said I'm hopeful if I can burn through some of my backlog this week I might actually get to booting a new server before our next meeting19:30
clarkb#link https://etherpad.opendev.org/p/opendev-bionic-server-upgrades Notes19:30
clarkbPlease add your name next to any hosts you plan on dealing with19:31
clarkbto avoid stepping on toes as we work through this19:31
clarkb#topic Fips job updates19:31
clarkbade_lee added this to the agenda after I sent it it out but we've got plenty of time so I think we can dig in19:31
clarkbthere are two outstanding changes to make this work. The one ot zuul-jobs is the one I'm concerned about since it makes a backward incompatible change. Does anyone know if that has been communicated like fungi requested?19:32
clarkbhttps://review.opendev.org/c/zuul/zuul-jobs/+/866881 that change19:32
clarkbthen the other question I had is if the second change can land at any time or if it needs to wait for ^19:32
clarkbhttps://review.opendev.org/c/openstack/project-config/+/86711219:32
ade_leeclarkb, it hasn't yet - but I can send it out -- I wanted to get some +2's first19:33
ade_leein case there were any other changes needed19:33
clarkbade_lee: gotcha, in that case I can try to review the zuul-jobs change today and then you can send email based on that I Guess19:33
ade_leeclarkb, as far as I know only one team is using these jobs (and that is tripleo which is setting the boolean true in any case)19:34
clarkbade_lee: is the project-config chang eeffecitvely a noop until the zuul-jobs change lands?19:34
fungii think the project-config change can probably land at any time since it's just supplying additional context to the zuul-jobs parent?19:34
fungibut i didn't review it with that possibility in mind19:34
ade_leeyeah I think so19:34
clarkbade_lee: zuul-jobs is a bit of a global zuul library. What this means is within opendev there may be only one team but we have to be mindful of other potential users19:34
ade_leeI already did talk with the tripleo folks19:34
ade_leeack understood19:35
ade_leeclarkb, if you're good with the change, I'll send it out once I get a +219:35
clarkbok I'll try to take a look today (it won't happen immediately after the meeting as I need to review themailman change then find lunch)19:35
clarkb#topic Gitea Upgrades19:36
ade_leecool thanks19:36
clarkbAnother new topic since we have time.19:36
ianwfungi: i we don't really care if the extant parent job is passed the secret 19:36
ianwi.e. if we merge that project config change now?19:36
fungiianw: right, it doesn't currently do anything with it19:36
clarkb#link https://review.opendev.org/c/opendev/system-config/+/870850 Upgrade Gitea to 1.17.4 and its child upgrades us to 1.18.119:36
clarkbOver the holidays there were a couple of gitea updates that I meant to upgrade us to. I think the 1.17.4 upgrade is very straightforward and quite safe. The 1.18.1 upgrade form 1.17.4 is mroe involved. THere are template updates and golang is bumped to 1.19 and there are some config changes19:37
clarkbanyway reviews welcome and I think we can hold a 1.18.1 host for manual interaction too just to be extra sure (I haven't gotten that far yet)19:37
clarkbI wanted zuul to tell me if we got anything catastrophically wrong before I worried about holding stuff19:38
ianw++ will review19:39
clarkb#topic Open Discussion19:39
clarkbThat was all I had on the agenda19:39
clarkbAnything else?19:39
fungii got nuthin'19:39
ianwapropos nothing, but i was wondering if maybe we should do something like apache redirect opendev.org / to some sort of fancier static page19:40
clarkbwe can also have gitea serve it via the template file pretty easily19:40
clarkbthe upside to that is it helps people find repos and orgs in gitea more easily19:40
clarkbI want ot say fungi has been noolding on that sort of change19:40
ianwi still feel like that kind of goes from 0 - 100mph on changes via gerrit and gating really quickly19:40
ianw"that" being the current page we have there19:41
clarkbya I think the content can certainly use editing. But I think having gitea be navigable from the content is a good thing (and using the gitea templates gets us that integration for free ish)19:41
fungiyeah, for now the change i have up to add donor logos takes the current assets directory approach19:41
fricklerwhat became of the afs disk usage topic? do we want to add it to the agenda to at least watch it regularly?19:42
ianwfungi: oh, i feel like i've missed that, is it just one change?19:42
fungithe last time i talked about shadowing the main page in apache, one of the objections was that we need to be careful any sub-paths it incorporates don't shadow git namespaces19:42
ianwfrickler: we did purge some openeuler stuff, but it didn't make a big difference19:43
clarkbfrickler: sure, can you add it?19:43
clarkbthe openeuler cleanup would've been about 100GB iirc19:43
fungi#link https://review.opendev.org/869091 Feature our cloud donors on opendev.org19:43
fungiianw: ^19:43
ianwwill look, thanks19:43
fungiianw: and i too am interested in some reworking of the page content at the very least19:44
frickleroh, I missed the openeuler cleanup. with that we're at least well below 90% again19:44
fungiianw: like some of the faq we have up there is probably no longer necessary now that we've been around for a while19:44
clarkbfrickler: I do think more cleanup would be good especially to understand the growth in some of the volumes19:45
clarkbbut openeuler cleanup was a quick bandaid since the change was already written19:45
ianwi think i mentioned it last week, but i feel like purging xenial nodes, and everything related to it in various mirror volumes would be a help19:45
clarkbya that would make a good dent19:45
fungiabsolutely19:45
clarkbbut also doesn't explain why ubuntu has grown so much over the last 6 monmths19:46
clarkb(which may also expose somethign inefficient we are doing)19:46
ianwwe could make the mirror scripts dump some sort of du log19:47
ianwalthough i'm not sure how long that would take as it stats everything19:47
fricklerok, I'll add the topic to the agenda with those ideas listed19:48
clarkbSounds like that may be it for today? Thank you for your time and your help running OpenDev19:50
clarkbOh! I've just remembered one other item19:50
clarkbthe service coordinator election. I plan to send email to service-discuss making january 31 - february 14 the official time frame for nominations since no one objected19:51
clarkbI'll try yo get that out after lunch today19:51
fungithanks!19:51
clarkb#endmeeting19:51
opendevmeetMeeting ended Tue Jan 17 19:51:38 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)19:51
opendevmeetMinutes:        https://meetings.opendev.org/meetings/infra/2023/infra.2023-01-17-19.01.html19:51
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/infra/2023/infra.2023-01-17-19.01.txt19:51
opendevmeetLog:            https://meetings.opendev.org/meetings/infra/2023/infra.2023-01-17-19.01.log.html19:51
clarkband now we can have a few extra minutes for breakfast/lunch/dinner :)19:51

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!