Monday, 2020-04-06

openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763900:41
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763900:48
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763900:52
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763901:01
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763901:06
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763901:14
*** ysandeep|away is now known as ysandeep|rover01:30
*** ysandeep|rover is now known as ysandeep|away01:31
*** diablo_rojo has joined #opendev01:32
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763901:33
*** diablo_rojo has quit IRC01:47
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763901:57
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763902:44
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763902:52
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763903:03
*** ralonsoh has joined #opendev03:04
*** ysandeep|away is now known as ysandeep|rover03:33
*** ykarel|away is now known as ykarel04:12
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763904:27
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Add bionic-plain testing  https://review.opendev.org/71765504:27
openstackgerritIan Wienand proposed zuul/zuul-jobs master: test jobs: fixup autogeneration header  https://review.opendev.org/71765604:27
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Update Fedora to 31  https://review.opendev.org/71765704:29
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Add bionic-plain non-voting testing  https://review.opendev.org/71765505:44
openstackgerritIan Wienand proposed zuul/zuul-jobs master: test jobs: fixup autogeneration header  https://review.opendev.org/71765605:44
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763905:44
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Update Fedora to 31  https://review.opendev.org/71765705:44
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure-tox: preinstall pip  https://review.opendev.org/71766305:44
AJaegerianw: I don't think 717656 is ok, could you double check that headers are in the files afterwards, please?06:27
*** dpawlik has joined #opendev06:28
openstackgerritMerged opendev/base-jobs master: base: add bulk log download script  https://review.opendev.org/71681306:31
*** rpittau|afk is now known as rpittau06:35
*** DSpider has joined #opendev06:53
ianwAJaeger: arggh, yeah ... i think runuamel's claim to keep comments where they are in files is ... maybe not always true06:54
openstackgerritIan Wienand proposed zuul/zuul-jobs master: test jobs: fixup autogeneration header  https://review.opendev.org/71765606:57
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure pip role  https://review.opendev.org/71763906:57
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [wip] ensure-tox: preinstall pip  https://review.opendev.org/71766306:57
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Update Fedora to 31  https://review.opendev.org/71765706:58
openstackgerritIan Wienand proposed zuul/zuul-jobs master: ensure-tox: update Python version documentation  https://review.opendev.org/71766907:05
openstackgerritMerged zuul/zuul-jobs master: ensure-tox: update Python version documentation  https://review.opendev.org/71766907:24
*** tosky has joined #opendev07:58
*** ralonsoh has quit IRC07:58
*** ralonsoh has joined #opendev08:11
*** dpawlik has quit IRC08:29
*** ysandeep|rover is now known as ysandeep|lunch08:36
*** dpawlik has joined #opendev08:38
*** ykarel is now known as ykarel|lunch08:50
*** ysandeep|lunch is now known as ysandeep09:18
*** ysandeep is now known as ysandeep|rover09:19
*** ykarel|lunch is now known as ykarel09:36
openstackgerritRiccardo Pittau proposed openstack/diskimage-builder master: Make ipa centos8 dib job voting  https://review.opendev.org/71770009:57
AJaegerinfra-root, is ze05 broken? It shows a straight line at http://grafana.openstack.org/d/T6vSHcSik/zuul-status?orgId=1&from=1586145483660&to=158616708366009:58
AJaegerLooks like we have changes waiting forever for a new node - that might be related ^10:00
openstackgerritJan Kundrát proposed zuul/zuul-jobs master: docs: fix a typo in `run-test-command`  https://review.opendev.org/71771311:18
*** roman_g has joined #opendev11:18
fricklerinfra-root: AJaeger: failing to connect to ze05 via ssh, trying restart via API11:22
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire repo_build and pip_install roles  https://review.opendev.org/71771511:27
frickler#status log restarted ze05 which seems to have been dead since 2020-04-02-02:05Z11:31
openstackstatusfrickler: finished logging11:31
fricklerAJaeger: seems to have been in that state for a couple of days11:32
fricklerinfra-root: would we want to keep systemd logs from previous boots by creating /var/log/journal? I'm not sure whether we've discussed that question before or whether my brain is mixing contexts11:36
AJaegerthanks, frickler12:10
AJaegerinfra-root, there are 7 hold nodes - are those all needed?12:13
*** hashar has joined #opendev13:06
fungicorvus: ianw: frickler: those 7 held nodes have your nicks in the comments13:08
fungi(all for over a week)13:09
*** ykarel is now known as ykarel|afk13:11
openstackgerritMonty Taylor proposed opendev/system-config master: Run Zuul using Ansible and Containers  https://review.opendev.org/71762013:26
openstackgerritMerged openstack/diskimage-builder master: opensuse: fix python 2.x install  https://review.opendev.org/71643714:01
*** ykarel|afk is now known as ykarel14:06
mordredfungi: the databases tab in the rackspace web ui will not load for me14:23
mordredfungi: will it load for you?14:23
AJaegermordred: want to +A your own changes https://review.opendev.org/717136 and https://review.opendev.org/717004 ? Or are they not ready yet?14:23
mordredfungi: nevermind14:23
mordredfungi: asking the question seems to have fixed it14:23
mordredAJaeger: thanks - first one done. second one is waiting on https://review.opendev.org/#/c/717057/14:24
openstackgerritMerged zuul/zuul-jobs master: Rename install-docker to ensure-docker for consistency  https://review.opendev.org/71666314:30
*** ysandeep|rover is now known as ysandeep|afk14:31
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: docker-install: workaround for centos-8 conflicts  https://review.opendev.org/70305314:36
corvusfungi: i removed my autohold14:37
openstackgerritMerged openstack/project-config master: Run service-nameserver playbook on zone file changes  https://review.opendev.org/71700414:37
fungimordred: the rackspace dashboard is sometimes inexplicably slow to do things for me too14:39
mordredfungi: I have achieved my goal - which is finding out how big the etherpad db is14:40
mordredfungi: (I realized over the weekend that if we're going to run the etherpad db directly, we might want a volume to put it on :) )14:40
fungicorvus: thanks! looks like frickler took his out as well, so that just leaves ianw next time he's awake14:41
corvusmordred: we want abiword on etherpad?  i thought we didn't want it14:41
corvushuh, apparently we do want it14:42
mordredcorvus: yeah - I mean I don't know about "want - but we're currently installing it at least14:43
mordredyou know - we should probably drop in some my.cnf settings - like for collation and character set14:45
corvusmordred: should we disable abiword?14:46
corvusand use upstream images?14:46
mordredcorvus: I'd be fine with that myself14:47
corvusmordred: +2 https://review.opendev.org/71644214:48
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire repo_build and pip_install roles  https://review.opendev.org/71771514:48
mordredcorvus: cool. want me to make the abiword change first?14:50
mordredcorvus: (otherwise we might publish one etherpad image and then stop)14:50
corvusmordred: i'm ambivalent; let's see what other folks think14:51
corvusclarkb: ^?14:51
fricklerfungi: there are some more autoholds without held nodes in zuul it seems, maybe clean these up, too? not directly obvious how old these are, though14:53
*** sgw has quit IRC14:53
mordredcorvus: I need to put new patchset up to add db settings anyway (we have 3 settings in the cloud db)14:54
openstackgerritMerged zuul/zuul-jobs master: Rename install-kubernetes to ensure-kubernetes for consistency  https://review.opendev.org/71666714:56
fungifrickler: thanks, looks like i had a few in there for some reason14:56
fungidoes deleting autoheld nodes with `nodepool delete` not remove the autoholds? thought those went away as soon as the node entered a held state14:57
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire OSA repo_build and pip_install projects  https://review.opendev.org/71777514:59
mordredfungi: they stick around now - you can just manage it all from the zuul cli now - but I don't know that I've done a direct nodepool delete since that has happened14:59
mordredfungi, corvus, clarkb : https://review.opendev.org/#/c/717491/ is ready regardless of abiword - and the "trigger deploy on zone file changes" patch has landed, so we should get to see zuul run the infra-prod playbook for it when we land it :)15:00
fungioh, neat. so the autohold persists even if the count is reached, and you can clean up the nodes by deleting the hold itself?15:00
fungithat'll save me some lookup steps15:00
fricklerfungi: mordred: yeah, the only thing missing is to get the node IP from zuul, either need to go via nodepool or look up on the GUI via the build id15:00
mordredfungi: that is my current understanding of the system15:00
mordredfrickler: ++15:00
fricklerat least I haven't found an easier path15:01
*** roman_g has quit IRC15:05
clarkbcorvus: mordred does the upstream image not have abiword? so using it implies disabling that integration?15:08
corvusclarkb: that's my understanding15:10
*** sgw has joined #opendev15:12
*** ysandeep|afk is now known as ysandeep15:13
fungiexcellent15:13
fungiit used to be horribly broken if we didn't at least provide abiword15:14
clarkbfungi: well we toggle the option to enable that integration15:15
clarkbI personally never use that integration and would be fine with disabling it15:15
corvusfungi: looking at the git history, i think we got into to trouble because we had a config file that said to use abiword but did not have it installed15:15
clarkbnormal copy and pase tends to work for me15:15
corvusbut i'm not sure we ever had it disabled and not installed; it seems like that's probably the default and i would hope would work fine15:15
corvusand i think it's worth asking, because sometimes we have stuck abiword 100% cpu processes?15:16
fungiyeah, for some reason i didn't realize it was possible to configure it to turn that integration off15:16
fungimaybe it wasn't possible 6-7 years ago and we never revisited15:17
fungithough if we have explicit configuration there enabling it, that implies it must have been possible to not enable it even back then15:17
fungiand yeah, i don't think i've ever used the ms-word compatible doc exporting feature15:18
corvusyeah, i don't know if/why we never tried that :)15:18
openstackgerritMerged zuul/zuul-jobs master: Rename install-openshift to ensure-openshift for consistency  https://review.opendev.org/71667515:20
openstackgerritMerged zuul/zuul-jobs master: Rename install-podman to ensure-podman for consistency  https://review.opendev.org/71668215:20
*** ykarel is now known as ykarel|away15:28
*** ysandeep is now known as ysandeep|away15:39
mordredcorvus, clarkb, fungi : ok - I'll remove the abiword and resubmit the patch15:44
mordredwe can always add it back later if we want15:44
fungiawesome, thanks!15:46
fungialso we can easily test that on the current etherpad-dev15:46
openstackgerritMonty Taylor proposed opendev/system-config master: Make a new dockerized etherpad.opendev.org  https://review.opendev.org/71644215:47
mordredcorvus, clarkb, fungi : ^^ that removes abiword, our own images, and adds a my.cnf file with the settings that were in rax15:48
openstackgerritMonty Taylor proposed opendev/system-config master: Make a new dockerized etherpad.opendev.org  https://review.opendev.org/71644215:55
mordredadded depends-on to the dns change15:55
*** rpittau is now known as rpittau|afk16:08
openstackgerritMerged zuul/zuul-jobs master: Rename install-devstack to ensure-devstack for consistency  https://review.opendev.org/71668516:08
corvusclarkb: https://review.opendev.org/717491 and https://review.opendev.org/716442 are ready to go i think16:14
clarkbcorvus: will review as soon as meeting is over16:15
openstackgerritMerged zuul/zuul-jobs master: Rename install-javascript-packages to ensure-javascript-packages for consistency  https://review.opendev.org/71668716:17
clarkbmordred: your editor eats tabs :P16:21
mordredclarkb: uhoh16:21
mordredclarkb: oh - I should fix that maybe16:21
clarkbbind won't care16:21
*** diablo_rojo has joined #opendev16:22
mordredcool16:23
mordredthen I will not fix that16:23
mordredclarkb: we get to see the nameserver playbook fire when that merges!16:24
openstackgerritMerged opendev/zone-opendev.org master: Add dns entries for new etherpad01.opendev.org  https://review.opendev.org/71749116:25
fungibind *will* care in conffiles, but not in zonefiles (unless they eventually changed that), but keeping consistent is nice so that other people with different tabstops don't see wacky layouts16:25
openstackgerritMonty Taylor proposed opendev/zone-opendev.org master: Fix whitespace because tabs and spaces aren't the same  https://review.opendev.org/71779416:27
mordredfungi, clarkb : ^^16:27
fungithanks!16:29
sgwf16:31
sgwMorning folks!16:31
mordredclarkb: hrm. it doesn't look like the job fired16:32
sgwfungi: I am back looking at the semver changes for starlingx and still getting confused16:32
fungisgw: did you test things out?16:32
openstackgerritMonty Taylor proposed openstack/project-config master: Use deploy pipeline for zone file updates  https://review.opendev.org/71779716:33
clarkbmordred: should we land ^ then land the whitespace fix to test it?16:34
sgwI tried to tag with v4.0.0.0b0 and setup -q rpm_version returned 3.9999.9999.b0 which then caused a nomralized version of 3.9999.9999b0 and a mismatch16:34
sgw/usr/lib/python2.7/site-packages/setuptools/dist.py:355: UserWarning: Normalizing '3.9999.9999.b0' to '3.9999.9999b0'16:38
sgwand then later: error: File not found: /builddir/build/BUILDROOT/starlingx-dashboard-3.9999.9999.b0-0.tis.x86_64/usr/lib/python2.7/site-packages/starlingx_dashboard-3.9999.9999.b0*.egg-info16:38
clarkbmordred: can you see comment on https://review.opendev.org/#/c/716442/17 particularly the utf8 one, but the other needs to be handled if not yet already16:38
AJaegerconfig-core, please review https://review.opendev.org/716261 - and two zuul-base-jobs changes: https://review.opendev.org/#/c/708871/ https://review.opendev.org/#/c/716298/16:39
AJaegerand two zuul-jobs changes for review, please: https://review.opendev.org/717713 and https://review.opendev.org/71765516:40
sgwfungi: not sure what the next steps should be there, the difference with and without adding the Sem_Ver footer was just 3.0.9999 vs 3.9999.999916:45
clarkbsgw: the problem there being the rpm_version emitted is not normalized? I think that may be expected because rpm versions aren't necessarily pep440 compliant16:46
clarkbsgw: the rpm_version is a version that rpm can handle and the normalized version is a version pip/pep440 can handle16:47
clarkbsgw: are you setting PBR_VERSION during your build?16:48
clarkbI wonder if you need to explicitly override the version so that it doesn't normalize16:48
fungisgw: yeah, pep-440 -> rpm -> pep-440 isn't intended to be idempotent, if that was the expectation16:49
fungiwhat is renormalizing the rpm version number?16:49
sgwNo, not setting PBR_VERSION, working from the tags/Sem_Ver footer16:49
openstackgerritMerged zuul/zuul-jobs master: Rename install-nodejs to ensure-nodejs for consistency  https://review.opendev.org/71669216:50
fungipbr says the equivalent rpm version for 4.0.0.0b0 (a pep-440 normalized version number) should be 3.9999.9999.b0 (which is not pep-440 normalized and not intended to be)16:51
fungithe idea there is that the python version returned inside your packaging ought to be 4.0.0.0b016:52
sgwOr better yet how do I get the right pep-440 version into an rpm specfile for packaging it in an RPM?16:52
fungibut that the rpm containing it should declare package version 3.9999.9999.b016:52
fungiso when creating the rpm package containing 4.0.0.0b0 of some python module, you would use something like `setup -q rpm_version` to generate the version number to embed in the specfile16:53
fungii think16:53
fungimordred: ^ does that jive with your understanding of the use of pbr's rpm version feature?16:54
sgwRight which is what we are doing, but when trying to package via %files and this directive: %{python2_sitelib}/%{py_pkg_name}-%{version}*.egg-info16:54
sgwIt fails because the version is the PBR version not the pep-440 version16:54
clarkbsgw: fungi I think you need to set PBR_VERSION env var to the rpm_version output16:55
sgwthus the above error of file not found.16:55
fungithe %{version} part is the problem there i guess, and is taking the rpm package version from the specfile?16:55
clarkbotherwise pbr is going to default to producing a pep440 version16:55
clarkbyou need to force it to use the rpm version isntead16:55
fungier, shouldn't it be the other way around?16:55
clarkbfungi: not if you are building an rpm16:56
clarkbif you are building an rpm you want the version to be rpm compliant16:56
openstackgerritMerged zuul/zuul-jobs master: Rename install-yarn to ensure-yarn for consistency  https://review.opendev.org/71669316:56
fungiyou want the pep-440 version in the python egg-info because of mixing distro packaging and pip install16:56
clarkboh hrm, might want to ask rdo packagers what they do16:57
fungithe version number you get from `pip install foo===4.0.0.0b0` should be the same exact module as you got from `rpm -i ...` or whatever of the 3.9999.9999.b0 rpm16:57
fungiso instead of using the rpm version string in the egg-info template, you need the python package version string16:58
openstackgerritMerged openstack/project-config master: Use deploy pipeline for zone file updates  https://review.opendev.org/71779716:58
*** hashar is now known as hasharAway16:58
clarkbfungi: sgw in that acse you'd need to instruct your spec file to look for the egg with pep440 version name?16:59
fungiyes, it sounds like whatever is being used to template the specfile assumes a 1:1 match between the python package version string and the rpm version string, which is probably viable for normal releases but there is no good 1:1 correlation between pep-440 prerelease version strings and rpm version strings which retain linear versioning17:00
mordredclarkb: I don't thnk the deploy pipeline thing is why it didn't run - I'm honestly not sure why it didn't run17:00
clarkbmordred: should we land the whitespace fix and see what it does ro check logs on the first change first?17:01
mordredclarkb: I think we should check the logs on the first change17:01
clarkbk17:01
sgwI think we are getting closer!  Yes, I need a way to get the pep440 version name inside the spec file for the egg17:01
mordredcorvus: unless you have any ideas of why the nameserver job didn't fire on the zone repo merge off the top of your hear17:02
mordredhead17:02
AJaegersgw: you might want to ask on #openstack-rpm-packaging - I guess the Packaging-RPM team run into those issue already17:02
corvusmordred: sorry, i'm in a debug pit right now; i can join you in a few mins17:02
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: docker-install: workaround for centos-8 conflicts  https://review.opendev.org/70305317:03
fungiAJaeger: sgw: also they probably have specfiles in public git repos they can point you to for precise examples17:03
sgwAJaeger: I will take a look at that repo also and ask there.17:03
mordredcorvus: no worries - enjoy your pit17:03
mordredclarkb: but yeah - let's definitely hold the whitespace change for testing :)17:03
clarkbmordred: `grep 8981101b71c044d3adbf6b768ce6df8e /var/log/zuul/debug.log | grep promote` is what I'm looking at17:04
clarkbit seems to say "I matched the promote pipeline" but then its not yet clear to me why it took so little action after that17:05
sgwthanks all, biab17:05
mordredclarkb: 2020-04-06 16:26:06,260 DEBUG zuul.layout: [e: 8981101b71c044d3adbf6b768ce6df8e] Job <Job infra-prod-service-nameserver branches: None source: opendev/base-jobs/zuul.d/jobs.yaml@master#25> did not match files in <Change 0x7f3bc4458320 opendev/zone-opendev.org 717491,1>17:05
mordredclarkb: I thought files matchers didn't apply in promote. or do we need to do files: [] in the pipeline def?17:06
clarkbmordred: fiels matchers work in promote because its a change merged event17:07
clarkb(same thing with deploy)17:07
clarkbits ref-updated that files won't work so ya I think we need to clear that out17:07
clarkbmordred: also that explains why my | grep promote wasn't helping :)17:07
clarkbit wasn't logged as part of promote pipeline processing17:07
clarkband ya I think if any files merge to those repos we run the job17:08
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire OSA repo_build and pip_install projects  https://review.opendev.org/71777517:08
clarkbso don't need explicit matchers unless we need to say .*17:08
mordredclarkb: ah - so ... actually, what about this. ...17:08
mordredclarkb: 2 things - a) on the other jobs in system-config where we trigger them from other repos too - we do the file matchers in the pipeline def instead of in the job17:09
mordredmaybe we shoud do that here too17:09
mordredbut also - we can match on zones/.* - since that's the only files in the zone repo that matter17:10
openstackgerritMonty Taylor proposed openstack/project-config master: Change zone file job file matchers  https://review.opendev.org/71780817:10
mordredso like that17:10
clarkbya that should work17:10
AJaegerlet's try ;)17:10
clarkbonce that lands we can land the whitespace fix17:11
mordredwe're gonna need one more thing ...17:13
openstackgerritMonty Taylor proposed openstack/project-config master: Blank out the dependencies for zone repos  https://review.opendev.org/71780917:14
mordredclarkb, AJaeger : ^^17:14
mordred(we'll get a job graph freeze error otherwise)17:14
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Add support for RedHat platforms on ensure-podman  https://review.opendev.org/71657817:14
clarkbmordred: why will we get a graph freeze error? those repos are all in the same tenant17:15
mordredbecause infra-prod-service-nameserver depends on 4 other jobs, none of which are run in the pipeline for zone-opendev.org17:15
clarkbmordred: and they are nto all soft deps?17:16
mordred(we hit this with the project-config patch)17:16
mordredthey are not17:16
clarkbI see17:16
mordredbut even if they are - zuul still gets grump17:16
mordredbecause they're still depends17:16
mordredsoft lets it work if the job was skipped due to matchers - but it still needs to be there to ski17:16
mordredskip17:16
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005717:18
openstackgerritMerged zuul/zuul-jobs master: Rename install-pdk-dependencies to ensure-pdk-dependencies for consistency  https://review.opendev.org/71669517:20
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Add support for RedHat platforms on ensure-podman  https://review.opendev.org/71657817:20
corvusmordred: i've been looking into afs for zuul executors in containers.  results are mixed.  on the one hand, the simple case works -- you can get a ticket and a token inside a container and use bind-mounted afs.  but zuul-bwrap gets a new pag for each process it spawns (to keep zuul jobs separate), and when it does that, it doesn't seem like that pag is accessible inside the container anymore.  so17:24
corvuseverything succeeds, but the tokens aren't there and authenticated afs accesses fail.17:24
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Add support for RedHat platforms on ensure-podman  https://review.opendev.org/71657817:24
corvusmordred: i'm trying to think of other things to try, but i'm not coming up with anything17:24
mordredcorvus: hrm17:25
clarkbcorvus: pag?17:25
clarkb(but that almost seems like you might need to not namespace processes?17:25
corvusclarkb: process authentication group; a kernel construct afs uses to keep accesses scoped to users17:25
mordredcorvus: so to use auth'd afs the ticket has to be gotten inside of the same bwrap process?17:26
corvusmordred: no, even that doesn't work17:26
clarkbcorvus: I would try using the host process namespace17:26
mordredoh - is that becaues it's a different pag than the afs client is running in?17:26
clarkb(since in theory that is how it works without docker today)17:26
corvusonce bwrap does the setpag ioctl, it seems like the pag that aklog sees is scoped in a way that is different than how the filessystem accesses appear to the kernel17:26
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Add support for RedHat platforms on ensure-podman  https://review.opendev.org/71657817:27
mordredcorvus: and docker itself isn't doing a setpag17:27
corvusclarkb: you mean --pid=host ?17:28
corvusmordred: yeah, without zuul-bwrap/setpag, all docker containers get the same pag17:28
corvus(so an aklog in one container allows access in another)17:28
clarkbcorvus: yes, that appears to be the flag17:29
mordredcorvus: I mean - it seems like we _want_ the pag separation - otherwise we'd be leaky17:29
corvusmordred: yeah, i don't think we need to care about separating from docker containers, but i think we need the zuul-bwrap pag separation to work17:30
mordredcorvus: actually - wait a sec ... how is this working today?17:30
corvusi mention the docker pag sharing just as information to maybe help understand what's going on17:30
corvusmordred: we don't run in docker?17:30
mordredbut we do run in bwrap17:30
mordredand it's bwrap doing the pag call17:30
corvusmordred: sure, but that's not docker; it's the addition of docker that's screwing it up here.  i don't know why.17:31
mordredif docker isn't doing anything with the pag entries, one would imagine we'd see the same problem using afs in bwrap whether ... not17:31
mordrednod17:31
mordredso - docker is doing _something_ that is causing the pag separation to be weird17:31
clarkbit could be the nesting of namespaces (one of them I don't know which) is the problem17:31
clarkbits hierarchical and supposed to just work, but there may be assumptions in somethign that break that17:32
corvusmordred: yeah; i'm working on trying clarkb's thing17:32
mordredcool17:32
clarkbinfra-root I think now is a good time to send https://etherpad.openstack.org/p/IBLWO1WBBc email about opendev comms channels17:33
clarkbwant to give that one last look over? I'll be sending it to -infra and all the project-discuss lists17:33
openstackgerritMerged openstack/project-config master: Change zone file job file matchers  https://review.opendev.org/71780817:34
mordredcorvus: btw - we figured the other thing out17:34
corvusmordred, clarkb: no joy17:34
mordredcorvus: boo17:34
corvusmordred: i saw, thanks :)17:34
clarkbcorvus: is the container running privileged? if not that might have desireable side effects17:35
corvusmordred, clarkb: this is basically my test process: http://paste.openstack.org/show/791692/17:36
corvusclarkb: it is (that's necessary for zuul-bwrap)17:36
mordredcorvus: https://github.com/pagarme/runc/tree/afs - last 2 commits - is someone taking a stab at adding afs support to runc - it doesn't look like any new info - but including it in case there's something helpful in there17:37
mordred(it's basically adding runc calling setpag() - so I think new new info)17:38
openstackgerritMerged openstack/project-config master: Blank out the dependencies for zone repos  https://review.opendev.org/71780917:39
clarkbmordred: ^ want to approve your whitespace fix now?17:39
fungiclarkb: assuming it's the same as yesterday, already lgtm. otherwise i can reread once i'm done cooking lunch17:39
corvusmordred: this is fascinating: https://github.com/ist-dsi/docker-afs/blob/master/afs-client/init-script.sh17:39
clarkbfungi: I haven't chagned it17:39
corvusmordred: thatloads the openafs module from within a container17:40
corvus(i don't think that's a solution for us, but i find it very interesting)17:40
mordredcorvus: yeah17:41
clarkbthe kernel is shared though right? so loading a kernel module within a container or without has the same underlying effect?17:41
corvusclarkb: i would think so :)17:42
mordredclarkb: the comments say "The afs kernel module cannot be used simultaneously by two (or more) containers."17:42
clarkbok so afs isn't namespaced17:43
clarkbso bwrap must not be namespacing somethign that docker is namespacing17:43
clarkb?17:43
mordredcorvus: oh - I wonder if kafs woudl be any better here?17:43
corvusi don't know that i understand enough of the situation to say that17:43
corvusclarkb: ^17:43
mordred(also - I don't know enough yet either)17:43
clarkbmordred: https://review.opendev.org/#/c/717794/ is the chagne I think we can land now re dns zones17:44
corvusclarkb: for example, some of this behavior may be related to docker's daemon process17:44
mordredclarkb: agree. done17:44
clarkbcorvus: oh hrm17:44
mordredwhich is actually one of the reasons we were originally interested in using podman instead of docker for things17:44
corvusmordred: re kafs, perhaps?  i wonder if the same ioctl is available?17:45
*** gadzhet has joined #opendev17:45
corvusto perform setpag, we call the ioctl at /proc/fs/openafs/afs_ioctl17:45
clarkbalright I'm sending comms channel emails now17:46
corvusit does seem like both a kafs and a podman experiment (possibly with both docker afs kafs) might produce additional data17:46
mordredcorvus: https://www.infradead.org/~dhowells/kafs/user_interface.html says no17:46
corvusit does seem like both a kafs and a podman experiment (possibly with both openafs and kafs) might produce additional data17:46
mordredcorvus: yes - I think those experiments are worthwhile17:46
mordredI don't know how up to date that web page is17:46
openstackgerritMerged opendev/zone-opendev.org master: Fix whitespace because tabs and spaces aren't the same  https://review.opendev.org/71779417:47
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005717:48
corvusmordred: i think kafs uses keyrings instead of pags?17:49
corvusso things could be very different17:49
openstackgerritAndreas Jaeger proposed openstack/project-config master: Use ensure-* roles  https://review.opendev.org/71781317:50
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005717:50
mordredcorvus: they could - although that might be nicer for controlling things?17:50
corvusmordred, clarkb: did ianw's experiments with kafs result in learning that it wasn't as stable as openafs and we saw crashes on the mirror servers?17:50
* mordred does not 100% remember - but thinks that might be true17:51
*** dpawlik has quit IRC17:51
clarkbyes we saw crashes on the mirrors17:51
clarkbwe had to reboot them to recover iirc17:51
corvusi can't recall how new of a kernel those used -- maybe that was just whatever was in xenial?17:51
clarkbit was bionic17:51
corvus:(17:52
corvuswell, how about i try my current experiment with openafs+podman.  that shouldn't be hard to do.17:52
mordred++17:52
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Add support for RedHat platforms on ensure-podman  https://review.opendev.org/71657817:52
openstackgerritAndreas Jaeger proposed opendev/base-jobs master: Use ensure-* roles  https://review.opendev.org/71781517:54
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-yarn: run ensure-nodejs before  https://review.opendev.org/71781717:55
corvusclarkb, mordred: same behavior with podman17:59
mordredcorvus: well - at least it's consistent18:00
mordredand probably rules out the daemon18:00
openstackgerritMerged zuul/zuul-jobs master: Rename install-if-python to ensure-if-python for consistency  https://review.opendev.org/71669818:02
gadzhetHey! Who can help with the zuul job problem?18:02
gadzhetThis job https://zuul.opendev.org/t/openstack/build/1198d3e829504ce0a222c0547a693f52 always crashes with the error "ImportError: No module named configparser” project x/stackalytics18:02
*** ralonsoh has quit IRC18:03
mordredgadzhet: configparser is a python3 module - stestr doesn't support python2 anymore18:04
mordredso stackalytics might need to pin stestr in its requirements - at least for python218:05
AJaegergadzhet: the stackalytics team is using github nowadays AFAIK, so I'm not sure that you submit to the right place18:05
mordredhttps://github.com/stackalytics/default_data18:06
mordredAJaeger: should we retire that repo?18:06
AJaegermordred: last merge was three weeks ago - which surprises me. But if they really use github, we should retire...18:06
mordredyeah18:06
mordredthe wiki pages points to the github repo above for making data changes18:07
gadzhetOh. thanks for the information.18:09
*** prometheanfire has quit IRC18:10
AJaegermordred: let me mail the stackalytics folks..18:11
fungii think they've been manually combining those somehow, because they want to track cncf project activity and don't want cncf contributors to have to submit changes to opendev (granted at the time they switched that up, the review site still said "openstack")18:12
clarkbmordred: etherpad01.opendev.org seems to resolve. I think those changes to project-config fixed it18:12
mordredclarkb: \o/ https://zuul.opendev.org/t/openstack/build/b43bb6bb01734be28f2ba59b8f2f06eb18:14
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-repositories: Add role  https://review.opendev.org/71750718:17
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-nodejs: refactor to use ensure-repositories  https://review.opendev.org/71750818:17
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-yarn: refactor to use ensure-repositories  https://review.opendev.org/71750918:17
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-yarn: run ensure-nodejs before  https://review.opendev.org/71781718:17
*** mlavalle has joined #opendev18:18
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005718:19
openstackgerritMonty Taylor proposed opendev/system-config master: Disable log collection pending further auditing  https://review.opendev.org/71782318:20
openstackgerritJeremy Stanley proposed opendev/system-config master: Mention new mailing lists  https://review.opendev.org/71782418:21
openstackgerritMonty Taylor proposed opendev/system-config master: Disable log collection pending further auditing  https://review.opendev.org/71782318:23
*** prometheanfire has joined #opendev18:28
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005718:38
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire OSA repo_build and pip_install projects  https://review.opendev.org/71777518:44
openstackgerritAlbin Vass proposed opendev/system-config master: Use ensure-* roles  https://review.opendev.org/71783318:45
openstackgerritMerged opendev/system-config master: Disable log collection pending further auditing  https://review.opendev.org/71782319:04
*** hasharAway is now known as hashar19:08
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Rename install-go to ensure-go for consistency  https://review.opendev.org/71668919:10
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Retire OSA repo_build and pip_install projects  https://review.opendev.org/71777519:37
openstackgerritMonty Taylor proposed opendev/zone-opendev.org master: Rotate DS record for acme.opendev.org  https://review.opendev.org/71785520:55
mordredclarkb, corvus, fungi : ^^20:55
openstackgerritMonty Taylor proposed opendev/zone-opendev.org master: Rotate DS record for acme.opendev.org  https://review.opendev.org/71785520:57
mordredclarkb: ^^ fixed20:57
*** jkt has quit IRC21:04
*** jkt has joined #opendev21:04
openstackgerritMerged opendev/zone-opendev.org master: Rotate DS record for acme.opendev.org  https://review.opendev.org/71785521:08
openstackgerritMohammed Naser proposed zuul/zuul-jobs master: ensure-yarn: run ensure-nodejs before  https://review.opendev.org/71781721:10
*** hashar has quit IRC21:33
fungiclarkb: related to the new ml announcement, https://review.opendev.org/717824 updates some places we refered to the old ml in system-config (so updates the opendev.org main page and a bit in our docs)21:50
fungii intentionally skipped updating some bits we have in there about certificate authority/server keys for zuul, and gerrit accounts as those likely need changing outside the repo21:51
clarkbinfra-root ^ anyone else able to ack that one in?21:51
fungii also checked infra-manual but we don't seem to mention the ml in it (maybe we should, but there's at least nothing we need to update to stop referring to the old one)21:51
fungithere are tons of matches in our repos for the old ml in, like, setup.cfg files but i figure those are somewhere between non-urgent and pointless to fix, depending on whether or not we publish packages for them on pypi21:52
fungii updated the setup.cfg in system-config because i just happened to be in there changing it in other files anyway21:53
clarkbya I expect the vast majority of those things never end up on pypi21:54
fungii have a staged change for the other references, i can push that up wip in case folks want to consider some or all of it21:54
fungi(for system-config)21:54
openstackgerritJeremy Stanley proposed opendev/system-config master: Update some more uses of the old ML  https://review.opendev.org/71786721:55
fungifor completeness ^21:56
fungiand now i've set that wip with inline comments about why those are in the wip patch22:00
openstackgerritMerged zuul/zuul-jobs master: Rename install-go to ensure-go for consistency  https://review.opendev.org/71668922:04
ianwcorvus: we actualy mostly hit issues with cachefilesd, which unfortunately seems ... undermaintained.  although there were certainly kafs issues but we got a lot of them sorted out quickly22:08
ianwcorvus: we were using bleeding edge kernels (at the time)22:08
ianwcorvus: the statck is all still at https://review.opendev.org/#/c/665057/ waiting for the right time and interest to revisit ...22:09
clarkb#status log restarted all of logstash geard, workers and logstash itself to reset after nova fixed its n-api log files22:11
openstackstatusclarkb: finished logging22:11
mordredianw: if you didn't see all the way back int eh scrollback, the investigation is "what do we need to do to use AFS inside of bubblewrap inside of docker" - which is a scenario which will become real if we start deploying zuul from containers22:23
mordredianw: seems like it's going to be a fun issue to solve :)22:24
mordredianw: one of the hypotheses (why kafs came up) was that maybe kafs would work better for this case - either by being a newer impl - or perhaps its use of keytabs instead of PAG will avoid the issue somehow22:25
mordredbut we haven't dug in to that at all22:25
*** hashar has joined #opendev22:26
ianwmordred: it's R/O ... don't we mostly do write operations on nodes?  i may be misremembring22:31
*** gadzhet has quit IRC22:31
*** DSpider has quit IRC22:32
fungiwe write from executors22:34
ianwyeah, refreshed my memory ... i'm thinking of just the wheel jobs :)22:36
ianwsome patches flew by a while ago for the kafs client tools debian package, before that i think it was rpm only22:41
ianwlooks like that's still in progress across a few github trees22:43
ianwthread starts http://lists.infradead.org/pipermail/linux-afs/2020-February/003611.html22:43
openstackgerritIan Wienand proposed opendev/system-config master: Remove some unnecessary debug: statements  https://review.opendev.org/71787422:48
*** tosky has quit IRC23:28
*** hashar has quit IRC23:32
openstackgerritMerged opendev/infra-specs master: POC Xwiki farm at wiki.opendev.org  https://review.opendev.org/71005723:53
clarkbmeeting agenda is out. I sent it to service-discuss then sent a pointer to that thread to openstack-infra@lists.o.o23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!