Thursday, 2020-05-28

*** DSpider has quit IRC00:23
clarkbsr00:30
clarkbderp00:30
ianwyou know we don't actually have centos-7 arm64 nodes.  that's going to be a bummer for the new wheel jobs that will fail on that00:35
ianwi do not know why i didn't think of that before now00:35
openstackgerritMerged openstack/diskimage-builder master: Add dependency on yamllint  https://review.opendev.org/73124500:38
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137800:47
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137800:51
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888900:51
*** Meiyan has joined #opendev00:56
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137801:04
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888901:04
fungiianw: d'oh, right... hrw were you planning to try to add centos-7-arm64 nodes?01:10
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137801:10
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888901:10
ianwit hasn't been gate tested01:10
openstackgerritIan Wienand proposed openstack/project-config master: wheel-build: remove centos-7-arm jobs  https://review.opendev.org/73138001:14
ianwfungi: ^01:14
ianwwe should also run a requirements check01:15
ianwa check in requirements i should say01:15
*** ysandeep|away is now known as ysandeep01:16
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137801:28
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888901:28
*** sshnaidm|afk is now known as sshnaidm|off01:34
ianwerror: Curl error (28): Timeout was reached for http://mirror.regionone.linaro-us.opendev.org/centos/8/AppStream/aarch64/os/repodata/repomd.xml [Operation too slow. Less than 1000 bytes/sec transferred the last 30 seconds]01:37
*** mlavalle has quit IRC01:37
ianwthat's probably not a great start for the wheel build jobs01:37
*** cloudnull has quit IRC01:43
*** cloudnull has joined #opendev01:51
openstackgerritIan Wienand proposed openstack/project-config master: build-wheels: ensure virtualenv  https://review.opendev.org/73138702:01
openstackgerritMerged openstack/diskimage-builder master: use stage3 instead of stage4 for gentoo builds  https://review.opendev.org/71717702:02
openstackgerritMerged openstack/diskimage-builder master: Pre-install xz package in opensuse chroot  https://review.opendev.org/73099202:06
ianwso at this point, i'm not aware of any current platform issues with dib.  so this should be a nice place to drop py2 support02:07
*** redrobot has quit IRC02:22
openstackgerritIan Wienand proposed openstack/project-config master: build-wheels: ensure virtualenv  https://review.opendev.org/73138702:39
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137802:45
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888902:45
openstackgerritIan Wienand proposed openstack/project-config master: build-wheels: ensure virtualenv  https://review.opendev.org/73138702:54
openstackgerritMerged openstack/project-config master: wheel-build: remove centos-7-arm jobs  https://review.opendev.org/73138002:57
*** Eighth_Doctor is now known as Conan_Kudo03:04
*** Conan_Kudo is now known as Eighth_Doctor03:04
openstackgerritIan Wienand proposed openstack/project-config master: Move wheel build role/job outside project-config  https://review.opendev.org/73140103:32
openstackgerritIan Wienand proposed openstack/project-config master: Move wheel build role/job outside project-config  https://review.opendev.org/73140103:49
openstackgerritIan Wienand proposed openstack/project-config master: Move wheel build role/job outside project-config  https://review.opendev.org/73140103:50
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137804:04
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888904:04
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: WIP: Sync with configure-mirrors  https://review.opendev.org/73129304:17
*** ykarel|away is now known as ykarel04:23
*** sgw has quit IRC05:06
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add configure-os-mirrors role  https://review.opendev.org/67757805:18
*** dpawlik has joined #opendev06:07
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Fix typo: Deprecrated  https://review.opendev.org/73143906:10
openstackgerritIan Wienand proposed openstack/project-config master: Move wheel build role/job outside project-config  https://review.opendev.org/73140106:16
AJaegerianw: regarding the wheel build jobs: these are openstack specific, so no sense to find an opendev repo - do you agree?06:26
ianwhrw/fungi/AJaeger: I *think* i've got everything in order for https://review.opendev.org/#/q/topic:arm64-wheel+(status:open+OR+status:merged)06:26
ianwAJaeger: as in move it to opendev-base-jobs?06:27
AJaegerianw: I now dug deeper - it iterates over opesntack/requirements, so the implementation is openstack specific.06:29
AJaegerso, openstack-zuul-jobs is probably fine. And yes, opendev/base-jobs was an alternative if we think we would generalize it and include further repos06:30
ianwyeah, i mean it *could* be even further abstracted into something more generic ... but not in this change :)06:30
AJaegeragreed, not in this change - and I see nothing in other projects; so leave it there.06:31
ianwohhh, all the requirements branches will have to update the job names06:31
ianwi'm out of time for that now, but that only affects removing them from project config06:31
AJaegerleft a note on the openstack-zuul-jobs change, you renamed jobs to "cache" but talk in description about "CI mirrors". Want to change that as well?06:32
AJaegeron the other hand the URL is "mirror..."06:32
jrosseri am looking at these dib-lint errors https://zuul.opendev.org/t/openstack/build/56dd0c43bb444c43b9384f3452031082/log/job-output.txt#61006:33
jrosseris the right thing to do to add the '---' as the error suggests?06:33
ianwjrosser: oh, hrm, we included yamllint to detect duplicate keys, it should be skipping that check06:35
ianwjrosser: ohhh, damn, i guess that yamllint doesn't pickup the .yamllint file in the dib directory06:37
jrosseri just tried it locally here and there are four occurrences of the error06:37
ianwi guess you're running dib-lint from an install?06:38
jrosseri pip installed it yes, to try to understand what was happening06:38
ianwjrosser: yeah, it's not getting the .yamllint from the dib source tree that would make it ignore that06:39
ianwthat's not the intent06:39
ianwthe reason i did it was because it picked up duplicate keys better than what we had, which was just load the yaml files with pyyaml06:39
jrosseri figured i'd ask as this felt like a case of "new linter" and i just am unlucky with that patch06:40
*** jaicaa has quit IRC06:42
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Revert "dib-lint: use yamllint to parse YAML files"  https://review.opendev.org/73144106:45
ianwjrosser: ^06:45
*** jaicaa has joined #opendev06:45
jrosserthankyou :)06:45
ianwjrosser: i will do a point release so that doesn't get lost in the last 2.x release06:47
jrossersure, i'm keen to get that patch to the focal images landed fairly soon if thats possible06:50
*** hashar has joined #opendev06:51
openstackgerritMerged openstack/diskimage-builder master: Revert "dib-lint: use yamllint to parse YAML files"  https://review.opendev.org/73144107:00
ianw2.37.3 should fix it, a recheck in a bit07:07
*** DSpider has joined #opendev07:10
openstackgerritMerged zuul/zuul-jobs master: Fix typo: Deprecrated  https://review.opendev.org/73143907:11
*** tosky has joined #opendev07:44
openstackgerritMerged openstack/project-config master: Don't install python-dev on focal  https://review.opendev.org/73123707:54
*** moppy has quit IRC08:01
*** moppy has joined #opendev08:01
*** slaweq_ has joined #opendev08:06
*** slaweq has quit IRC08:07
fricklerinfra-root: I deleted the latest focal image in order to trigger a rebuild with ^^. I also noticed some oldish images built by nb04, should we clean these up manually? http://paste.openstack.org/show/794083/08:11
*** ykarel is now known as ykarel|lunch08:13
*** icarusfactor has quit IRC08:14
frickleralso, how would one run these commands on the new dockerized servers like nb01? we might want to add some docs about it to https://docs.openstack.org/infra/system-config/nodepool.html08:14
*** roman_g has joined #opendev08:24
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267908:25
*** ravsingh has joined #opendev08:33
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add root_marker_dir for releasenotes publish  https://review.opendev.org/73146208:34
*** xiaolin has joined #opendev08:34
*** tkajinam has quit IRC08:37
*** dtantsur|afk is now known as dtantsur08:40
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Enable linting of test-playbooks  https://review.opendev.org/73147108:45
*** ykarel|lunch is now known as ykarel08:52
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267908:53
*** rpittau|afk is now known as rpittau08:53
*** ysandeep is now known as ysandeep|lunch09:35
*** ravsingh has quit IRC09:39
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267909:45
*** ravsingh has joined #opendev09:52
*** Meiyan has quit IRC09:55
*** tosky_ has joined #opendev09:57
*** tosky is now known as Guest4863309:57
*** tosky_ is now known as tosky09:57
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267910:09
*** slaweq_ is now known as slaweq10:15
*** rpittau is now known as rpittau|bbl10:18
*** ysandeep|lunch is now known as ysandeep10:18
*** sshnaidm|off has quit IRC10:55
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136511:10
jrosserfocal image seems to be build without python2 now https://nb01.opendev.org/ubuntu-focal-0000009842.log, thats cool11:17
openstackgerritSorin Sbarnea (zbr) proposed opendev/elastic-recheck master: Replace pep8 jobs with linters  https://review.opendev.org/73149711:17
*** rpittau|bbl is now known as rpittau12:05
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/project-config master: Replace vexxhost sjc1 with ca region  https://review.opendev.org/73150812:12
*** dtantsur is now known as dtantsur|brb12:14
*** ravsingh has quit IRC12:38
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129212:44
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131912:44
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136512:48
openstackgerritSean McGinnis proposed openstack/project-config master: Drop legacy-tempest-dsvm-neutron-full-* jobs  https://review.opendev.org/73151812:52
*** priteau has joined #opendev12:58
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add addons args in ensure-kubernetes role  https://review.opendev.org/73152313:06
*** dtantsur|brb is now known as dtantsur13:09
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129213:09
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131913:09
openstackgerritMerged zuul/zuul-jobs master: shake-build: add shake build system job  https://review.opendev.org/73136513:28
openstackgerritNate Johnston proposed openstack/project-config master: Add no-op jobs for Congress preparatory to retirement  https://review.opendev.org/73153413:37
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: upload-artifactory: fix variable misspelling  https://review.opendev.org/73153513:37
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: upload-artifactory: fix variable misspelling  https://review.opendev.org/73153513:38
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099113:46
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125813:46
*** sgw has joined #opendev13:47
mordredfrickler: good point on docs ... we might also want to put in a helper script so that just running "nodepool" works as expected (we've done that in some other places)13:47
mordredfrickler: until then, using docker exec to execute a command in the container is the easiest13:49
mordredfor instance:13:49
mordredroot@nb01:~# docker exec -it nodepool-builder-compose_nodepool-builder_1 nodepool list13:49
mordredand you can see the container name from docker ps13:49
*** ykarel is now known as ykarel|away13:50
mordredclarkb: https://review.opendev.org/#/c/731224/ and its two parents are ready for review and should be safe to land14:06
mordredclarkb: the children are also ready for review - I think the first failure is ephemeral and I rechecked14:07
corvusmordred, frickler: yeah, i've just been running commands on nl01 because of the "docker exec" thing, so a helper script would be great14:10
mordredcorvus: I'll get a patch up for one14:11
*** rpittau is now known as rpittau|brb14:18
openstackgerritMonty Taylor proposed opendev/system-config master: Install nodepool helper scripts on nodepool hosts  https://review.opendev.org/73154914:20
mordredcorvus, frickler: ^^14:20
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: upload-artifactory: fix variable misspelling  https://review.opendev.org/73153514:26
*** rpittau|brb is now known as rpittau14:29
*** ravsingh has joined #opendev14:38
*** ravsingh has quit IRC14:47
clarkbmordred: we're ok with the move of exim in https://review.opendev.org/#/c/730937/8 ?14:55
clarkbmordred: iirc it was in the top dir roles/ dir to make it more reconsumable14:55
clarkb(I see how it makes file matchers simpler so agree with the intent just not sure if we expect that ot break anyone)14:55
clarkbmordred: I +2'd it but didn't approve in case we want to sort through ^ a bit more14:57
mordredclarkb: yeah - that was the intent - but I don't know that in practice that reconsumability ever occurred14:59
clarkbya I've certainly never heard of someone doing it14:59
clarkbpabelanger with windmill installs for ansible might be the only case I can think of where it may have happened14:59
mordredand I think at this point given our general staffing size I don't thnk we should chase theoretical reconsumability to hard15:00
mordredclarkb: nod15:00
clarkbwhen we move it that will cause external ansible runs relying on that path to fail because the role won't be available right?15:01
clarkbbasically it will fail "safely"15:01
clarkbI think given that would be the failure more we can move it and then if people show up asking questions we'll learn something15:01
*** Guest70400 has joined #opendev15:03
clarkbjvb01 seems to ahve the same snmp problems as meetpad. I wonder if all new ipv6 addrs in rax can't route back to cacti's existing addr15:05
*** Guest70400 is now known as redrobot15:05
clarkbI'll give it the same ipv4 address override in a bit (mostly worried about not having data during the ptg then we can maybe look at new cacti or somethign)15:05
fungiyeah, i think the issue is likely with the cacti server15:07
clarkbas a heads up it is going to get very warm here today so I'm going to try and get a bike ride in early. THen I've also got AC person out as well as $school stuff so my morning is going to be weird15:07
*** avass has joined #opendev15:07
fungiyeah, we're trying to get an estimate this week for a new heating and cooling system. ours is 12 years old and the latest repair bill is steep what with leaks in multiple places, so may be time to send it on to valhalla15:09
fungiif we can get them to actually show up, i'll likely get sucked into that for a while15:10
mordredfungi: have you considered just learning to enjoy being hot?15:10
fungii don't mind it at all. but i got married15:12
openstackgerritMerged opendev/system-config master: Clean up base playbook  https://review.opendev.org/73098515:25
clarkbanyone else want to weigh in on the exim role move in https://review.opendev.org/#/c/730937/8 ? if not I think we can approve it15:27
clarkbfungi: frickler ^15:28
openstackgerritMerged openstack/project-config master: Replace vexxhost sjc1 with ca region  https://review.opendev.org/73150815:28
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: upload-artifactory: documentation fix  https://review.opendev.org/73117015:28
clarkbinfra-root also I'll plan to approve https://review.opendev.org/#/c/730862/ once my bike ride is done as I should be able to monitor it from that point on15:30
fricklerI'm getting a bunch of broken files when running download-logs.sh. reason is that base_url ends with a /, and here another / is added https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/local-log-download/templates/download-logs.sh.j2#L69 which gives 404s at least from ovh.net15:38
clarkbI've added njohnston to https://review.opendev.org/#/admin/groups/232,members to facilitate the changes at https://review.opendev.org/#/c/728818/415:38
openstackgerritMerged openstack/project-config master: Add no-op jobs for Congress preparatory to retirement  https://review.opendev.org/73153415:39
clarkbfrickler: usually multiple /'s are collapsed together because unix filesystems will do that. But swift is approximating paths there as it isn't a file system and we probably hit the error due to that15:40
clarkbfrickler: likely we'll need to fix the script15:40
fricklerclarkb: yeah, just double-check that the url always ends in a /. eoding now, I can take a look tomorrow15:41
openstackgerritNate Johnston proposed openstack/project-config master: Retire the Congress project  https://review.opendev.org/72174215:49
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267915:50
openstackgerritMerged zuul/zuul-jobs master: upload-artifactory: documentation fix  https://review.opendev.org/73117015:50
AJaegerclarkb, please tell njohnston to abandon all open reviews for cyborg as well15:51
openstackgerritNate Johnston proposed openstack/project-config master: Retire the Congress project  https://review.opendev.org/72174215:51
clarkbAJaeger: cyborg or congress?15:53
AJaegerclarkb: congress - argh ;(15:56
openstackgerritNate Johnston proposed openstack/project-config master: Retire the Congress project  https://review.opendev.org/72174216:02
*** ysandeep is now known as ysandeep|afk16:02
*** bhagyashris|ruck is now known as bhagyashris16:05
*** hashar has quit IRC16:05
*** rpittau is now known as rpittau|afk16:08
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129216:13
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131916:13
*** priteau has quit IRC16:14
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131916:14
*** priteau has joined #opendev16:15
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add addons args in ensure-kubernetes role  https://review.opendev.org/73152316:16
*** dpawlik has quit IRC16:19
*** priteau has quit IRC16:19
*** roman_g has quit IRC16:21
*** mlavalle has joined #opendev16:29
mordredclarkb, corvus: you're both smarter than I am - do you see why the service-mirror job is timing out in https://review.opendev.org/#/c/730999 and https://review.opendev.org/#/c/730991 - it failed with the timeout in a recheck too - so it seems to be a consistent timeout16:33
clarkbmordred: it has to build afs with dkms iirc and that is slow16:33
clarkbthats part of the slowness I remember, not sure if that is enough to account for a timeout though (I thought we bumped the timeout to an hour too?)16:34
clarkbhrm no thats a half hour timeout16:34
clarkbI think for jobs that install the afs kernel module we need longer timeouts16:34
mordredclarkb: it seems to be timing out in the testinfra tests - oh, but I wonder if adding the iptables role to the playbook is enough to bump it over 3016:40
clarkbmordred: ya it may timeout later but a huge chunk of time is eaten by the afs compile16:41
clarkband ya its possible that adding more ansible to it is enough to bump it over the threshold there16:41
clarkbI'm going to pop out now for that bike ride. Back in a bit and I'll approve that https mirrors change then16:44
openstackgerritMonty Taylor proposed opendev/puppet-openstack_infra_spec_helper master: Install hosts file into service location  https://review.opendev.org/73158316:47
*** priteau has joined #opendev16:49
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099116:51
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125816:51
mordredclarkb: I bumped the timeout to see if that helps - and also fixed up the places where our puppet tests were confused16:51
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129216:52
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131916:52
openstackgerritMerged zuul/zuul-jobs master: Bump ansible-lint to 4.3.0  https://review.opendev.org/70267916:55
*** priteau has quit IRC16:55
*** ysandeep|afk is now known as ysandeep16:57
*** dtantsur is now known as dtantsur|afk17:00
* prometheanfire needs to watch the infra gentoo build now that the gentoo image is being built from stage3 (from upstream)17:05
*** ysandeep is now known as ysandeep|away17:13
AJaegerconfig-core, congress is retired now - please finish with +2A on https://review.opendev.org/#/c/72174217:16
*** olaph has quit IRC17:20
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Enable linting of test-playbooks  https://review.opendev.org/73147117:27
*** njohnston has joined #opendev17:28
openstackgerritMerged zuul/zuul-jobs master: Rename test install role to ensure-  https://review.opendev.org/73072017:47
*** dtroyer has quit IRC17:48
*** cloudnull has quit IRC17:48
*** cloudnull has joined #opendev17:49
openstackgerritMerged openstack/project-config master: Retire the Congress project  https://review.opendev.org/72174218:04
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099918:07
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099118:07
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125818:07
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: test-playbooks: improved syntax  https://review.opendev.org/73159118:12
*** diablo_rojo has joined #opendev18:16
diablo_rojoclarkb, fungi mordred corvus and anyone else interested in meetpad :)18:17
diablo_rojoI pulled numbers based on teams that said they were interested in meetpad18:17
diablo_rojoand it looks like from 13 -17 UTC you could have as many as 190 users..18:17
diablo_rojoOh, actually 215ish18:17
diablo_rojoAcross 10 rooms.18:18
diablo_rojo(shout out to wendallkaters for helping me pull the numbers)18:19
*** wendallkaters_ has joined #opendev18:19
clarkbdiablo_rojo: thank you for pulling those. we may want to laumch 2 or 3 more jvbs then18:20
diablo_rojoYeah18:20
diablo_rojoFriday the numbers go way down to under 10018:21
diablo_rojoIts just Tuesday - Thursday you need to worry most about.18:22
diablo_rojoMonday is in the 130 range18:22
clarkbhrm maybe we add a third jvb I think that givesus rough coverage for monday if we fogure ~40 per jvb18:24
clarkbthen based on that we can add more capacity for middle of the week18:25
clarkbor we can rollout all at once and it is easy enough to turn them off18:25
*** wendallkaters_ is now known as wendallkaters18:32
diablo_rojoclarkb, I think one before Monday would be good.18:33
diablo_rojoAnd then I guess you can see how that goes and decide if things are sketchy to add another one or two?18:33
diablo_rojo..or three?18:33
AJaegerFYI, we have now config-errors in openstack tenant due to congress removal - murano and openstack-ansible repos still have required-proejcts. I pushed changes for master, will backport18:34
AJaegermnaser: ^18:38
corvusdiablo_rojo, clarkb: yeah -- i think i'd almost just as soon go ahead and launch 2 or 3 more tomorrow so there's no delay if we need them.18:50
clarkbcorvus: ya I think I'm coming around to that too19:00
clarkbfwiw any infra root can add new ones just pick the next digit up from jvb0X, boot it, then add it to the inventory should get it enrolled19:01
clarkbI'm going to improve the base job change to use https with our mirrors now19:01
clarkbs/improve/approve/19:04
clarkbpost bike ride typos19:04
openstackgerritMerged opendev/base-jobs master: Use mirrors with ssl globally  https://review.opendev.org/73086219:08
clarkbI'll keep an eye out for any problems with and feel free to point out any oddities you may see, but its pretty well tested in zuul-jobs and with base-test so I think we're good19:10
clarkblookign at a xenial job it is correctly using http not https19:16
corvusclarkb: "approve" is the opposite of "improve", right? :)19:19
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: Enable linting of test-playbooks  https://review.opendev.org/73147119:26
*** priteau has joined #opendev19:38
*** priteau has quit IRC19:43
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: test-playbooks: avoid warnings with shell/command  https://review.opendev.org/73160519:47
clarkbspot checks of new changes entering openstack's check queue show not obvious issues yet. I expect this is working as testing expected it to19:48
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update docs for os specific task guidelines  https://review.opendev.org/73160619:49
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update guideline docs for os specific tasks  https://review.opendev.org/73160619:50
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update guideline docs for os specific tasks  https://review.opendev.org/73160619:52
clarkbI've also managed to find that pip is using https pypi mirror in some job logs so that aspect looks good too19:54
clarkbsince nothing is on fire I'm going to do local reboots for patching19:54
mordredclarkb, corvus: WOOHOO! The whole stack to https://review.opendev.org/#/c/731258 is green19:55
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update guideline docs for os specific tasks  https://review.opendev.org/73160619:55
mordredclarkb: and woot on ssl mirror19:55
fungii managed to get a/v on my workstation functioning for meetpad in preparation for next week19:57
fungiyay!19:57
fungifor a ~$1 webcam, it's not half bad20:00
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update guideline docs for os specific tasks  https://review.opendev.org/73160620:06
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Update guideline docs for os specific tasks  https://review.opendev.org/73160620:08
*** dtroyer has joined #opendev20:09
*** priteau has joined #opendev20:21
*** priteau has quit IRC20:26
*** slaweq has quit IRC20:33
mordredfungi: nice!20:49
clarkbfungi: I'm looking over our ptg etherpad and the authentication spec is on there (I added it a while back)21:04
clarkbfungi: do you think we might have a spec to review before the end of our PTG time?21:05
clarkbI've taken notes on who we might want around for various conversations, but if you are interested in something particular feel free to add your own annotations21:11
clarkbhttps://etherpad.opendev.org/p/opendev-virtual-ptg-june-2020 is the etherpad21:11
mordredoh authentication21:12
mordredsuch a cruel mistress21:12
mordredfungi, clarkb: also - https://review.opendev.org/#/q/topic:reorg-base is green and ready - and I think I'm confident that our testing is good enough that it should be good to go (I had to fix enough things that testing found that make me confident the right things are being exercised)21:14
clarkbmordred: I think you can approve https://review.opendev.org/#/c/730937/ since no one objected to the move earlier21:15
mordredclarkb: cool21:15
mordredclarkb, fungi: don't miss https://review.opendev.org/#/c/731583/ - which is in infra-spec-helper21:16
mordredclarkb: I really want those puppet jobs to go away - but still haven't gotten them replaced with system-config-run- jobs21:16
clarkbmordred: why does it matter that that file is in the service dir when we set the path to it with -i ?21:20
fungiclarkb: i can up the priority on refactoring all the text. i can have something to review either way, it's just a question of how many review comments i can avoid by cleaning it up better up front21:21
clarkbthat is so the relative path to host vars works?21:21
mordredclarkb: yes21:26
mordredclarkb: (we _could_ set up an ansible.cfg that also points to our yamlgroup plugin and then sets inventory to the written hosts file as well as the groups.yaml - but that seemed like extra work in a system that should ultimately be going away anyway)21:28
clarkbmordred: comments on https://review.opendev.org/#/c/730999/721:30
clarkbmordred: thanks for confirming21:31
openstackgerritMerged opendev/system-config master: Move base roles into a base subdir  https://review.opendev.org/73093721:36
mordredclarkb: I like the idea of renaming service-letsencrypt21:38
openstackgerritMerged opendev/system-config master: Move rackspace repo management to the repos role  https://review.opendev.org/73122421:39
*** mlavalle has quit IRC21:45
openstackgerritMonty Taylor proposed opendev/system-config master: Run iptables in service playbooks instead of base  https://review.opendev.org/73099921:48
openstackgerritMonty Taylor proposed opendev/system-config master: Split inventory into multiple dirs and move hostvars  https://review.opendev.org/73099121:48
openstackgerritMonty Taylor proposed opendev/system-config master: Override bridge hostvars directly  https://review.opendev.org/73125821:48
openstackgerritMonty Taylor proposed opendev/system-config master: Rename service-letsencrypt to just letsencrypt  https://review.opendev.org/73161721:48
mordredclarkb: added a rename patch there21:48
*** mlavalle has joined #opendev21:50
clarkbianw: if you're around today you may want to review https://review.opendev.org/#/c/731617/1 to make sure we aren't missing anything obvious with that le playbook rename21:55
clarkbmordred: is it ok to be scared pulling up https://review.opendev.org/#/c/730991/12 ? :)21:59
clarkbI know its mostly mechanical but a lot of stuff moving around there21:59
mordredclarkb: it's totally fine to be scared :)22:09
ianwclarkb: looking :)22:14
ianwclarkb/mordred: before we start moving letsencrypt, could i get one more eye on https://review.opendev.org/#/c/728743/ to add the sslcheck generation so that's running?22:16
ianwnote that's ontop of the testinfra change to pass the inventory as a fixture -- https://review.opendev.org/#/c/72941822:16
jrosserrepos are now https? i have an interesting conundrum now of how i install ca-certificates to overcome that22:17
*** DSpider has quit IRC22:19
ianwjrosser: hrm what are you starting from that doesn't have certs that cover letsencrypt by default?22:19
jrosseran lxc rootfs which it would appear does not have ca-certificates in it initially22:20
clarkbjrosser: yes I converted them today now that we have ssl available on all mirrors22:20
jrosserthere is this sort of thing i can do Acquire::https::Verify-Peer "false"; and so on22:21
ianwjrosser: hrrmmm, i don't want to be unhelpful but it does sound like that is doomed to fail in many ways :)22:21
clarkbjrosser: that gives us an extra level of assurance there isn't anything funny going on because we can't use gpg to sign our apt repos. Its also important for pypi which has no other verification22:21
clarkbjrosser: ianw: with bwrap and other light weight container tools its common to bind mount the hosts certs into the container22:21
clarkbmordred: left some thoughts on that change. Mostly I got confused and then think I sorted it out and that resulted in a suggestion22:22
clarkbmordred: but you should double check that my understanding is actually correct22:22
jrosserhmm it's still also serving http, is that going to continue?22:23
clarkbjrosser: probably? at least I haven't thought about turning it off yet22:23
clarkbjrosser: can you not bind mount in the cert trusts from the host?22:23
clarkb(zuul has to do this very thing with bwrap)22:23
jrosserthis has potentially broken every branch for OSA22:24
jrosserand i really don't want to go messing with the functional parts in stable branches for building container images22:24
jrosserso the easiest answer for me would be to adjust the mirror URL from https to http22:25
clarkbya that will work22:25
clarkbI hadn't considered turning off http22:25
jrosserok cool - i can work round it22:25
clarkbso we can probably leave that in place22:25
clarkb(as a side note if we created out own signing key for those repos I think the lxc containers would similarly break, so we can't address this problem that way either)22:27
jrosserif it came to it, looks like i could be a bit more surgical with Acquire::https::repo.domain.tld::Verify-Peer "false";22:27
clarkbthe underlying issue being that reprepro builds its own indexes and so we aren't mirroring what upstream has published and can't just piggy back off of their signing key22:28
clarkbwith https we're verifying the connectivity between the hosts and not the package content directly22:28
clarkbwith gpgp + http the package contents are validated but we'd have to add our own key to the trust chain for that so similar problem with slightly different tools22:29
jrosseryes, we use an aptly server here and have do use our own signing key for that22:29
clarkbjrosser: as a side note only bionic and newer are using https22:31
clarkband buster and newer? I 'm less confident on the debian side22:31
clarkbbut basically debian and ubuntu where apt is new enough to support https out of the box22:31
clarkbso not all of your stable branches will be affected potentially22:31
jrosseri don't think we have any xenial left, but having talked about it i think there's several things i can do which are not particularly invasive22:33
clarkbbut ya we'll keep the http up22:33
clarkbthat'll keep that option open22:33
jrosserbtw the removing of python2 from focal has worked22:34
clarkbjrosser: we also confirmed that ansible with zuul should prefer auto not auto legacy22:34
jrosserthe jobs get an awful lot further today than before22:34
clarkbso I think it is possible there is a bug in ansibles lookup tables or however it is determining what auto should be22:34
clarkb(because it really should prefer python3 at this point I think)22:34
mordredianw: +2 on both from me - I don't believe your patches and mine will conflict - assuming it can figure out the change and the rename. left a comment on https://review.opendev.org/#/c/728743/ though22:45
ianwmordred: thanks, yeah agree no conflict22:47
ianwwill add that matcher22:47
ianw"E: Failed to fetch https://mirror.regionone.linaro-us.opendev.org/ubuntu-ports/pool/main/l/lzo2/liblzo2-2_2.08-1.2_arm64.deb  403  Forbidden" ... that's a new one22:52
ianwhttps://zuul.opendev.org/t/openstack/build/8006451998854e7fb1220218a84eec64/logs22:52
clarkbianw: did we somehow sync fileperms that prevent apache from serving it?22:53
mordredclarkb: I responded to yoru comments - good comments - I'll probably respin that with a rename to gate-hosts.yaml22:53
clarkbianw: I've approved the test fixture change and its child was already approved so both things should end up going in soon22:54
*** tkajinam has joined #opendev22:54
clarkbianw: mordred editing https://review.opendev.org/#/c/728743/19/playbooks/host_vars/gitea01.opendev.org.yaml will conflict with mordreds changes to the host vars I think22:54
clarkbat a git level I mean22:54
ianwclarkb: it's ... weird.  i'm looking at the logs and there's 403 errors, but i get the file locally22:56
ianwmaybe i spoke too soon, i got one file, another like https://mirror.regionone.linaro-us.opendev.org/ubuntu-ports/pool/universe/p/python-iniparse/python-iniparse_0.4-2.2_all.deb is just hanging22:57
ianwahh, eventaully it came back 40322:57
ianw[Thu May 28 22:51:39 2020] afs: Lost contact with file server 104.130.138.161 in cell openstack.org (code -1) (all multi-homed ip addresses down for the server)22:59
ianw[Thu May 28 22:51:57 2020] afs: file server 104.130.138.161 in cell openstack.org is back up (code 0) (multi-homed address; other same-host interfaces may still be down)22:59
ianw[Thu May 28 23:00:37 2020] afs: Lost contact with file server 104.130.138.161 in cell openstack.org (code -1) (all multi-homed ip addresses down for the server)22:59
ianw[Thu May 28 23:00:50 2020] afs: file server 104.130.138.161 in cell openstack.org is back up (code 105) (multi-homed address; other same-host interfaces may still be down22:59
ianwthat's interesting that the kernel logs say it's 23:00 and the date on the system is Thu May 28 22:59:17 UTC 202023:00
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add the namespace in wait-for-pods role  https://review.opendev.org/73129223:04
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add namespace in the collect-k8s-logs role  https://review.opendev.org/73131923:04
*** factor has joined #opendev23:06
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add addons args in ensure-kubernetes role  https://review.opendev.org/73152323:16
openstackgerritMerged opendev/system-config master: testinfra: pass inventory and zuul data  https://review.opendev.org/72941823:18
ianwclarkb: ^ i'm thinking with that we could update the mirror jobs to query remotely.  i dunno if that really buys us anything, but it is kind of cool23:20
ianwmirror testinfra jobs i mean23:20
*** tosky has quit IRC23:20
clarkbianw: ya, I actually got them to, but in a more convoluted way23:21
clarkbI think we can update the tests to be more simple23:21
clarkbI'm about to transition to making fire and cooking food though23:21
openstackgerritOleksandr Kozachenko proposed zuul/zuul-jobs master: Add addons args in ensure-kubernetes role  https://review.opendev.org/73152323:24
openstackgerritMerged opendev/system-config master: Generate ssl check list directly from letsencrypt variables  https://review.opendev.org/72874323:31
fungiclarkb: revisiting the ansible auto python detection, could it be older pre-auto-capable ansible versions in jobs? or maybe nested ansible is actually where folks are hitting it?23:44
clarkbfungi: our default is 2.8 (maybe 2.9 now) and that is new enough for auto proper aiui23:45
clarkbfungi: corvus confirmed with a inventory file from a job showing auto was set23:45
fungiso... nested ansible defaulting to legacy?23:47
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Prepare to drop Python 2 support  https://review.opendev.org/73137823:47
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop support for python2  https://review.opendev.org/72888923:47
clarkbfungi: hrm was it nested ansible?23:47
clarkbthat could explain it too I suppose23:47
fungii honestly don't recall what the example was now23:48
clarkbit was an OSA job running against focal23:48
clarkbbut I'm not sure if that was zuul level ansible or nested now that you've got me thinking about hte nested possibility23:48
clarkbjrosser: ^ was your ubuntu focal issue with zuul's ansible or a nested ansible run?23:48
ianwi was looking at the matching stuff, because suse isn't in there either23:51
ianwso falls back to python223:51
clarkboh is it a lack of table entries that falls back to python2?23:53
clarkbmaybe we can convince them to invert that now that python2 is dead (ish)23:53
ianwyeah i added a note on one of the changes when we were dropping pip-and-virtualenv from suse, and python2 setuptools wasn't there23:54
ianwhttps://review.opendev.org/#/c/726728/ was it23:57
ianwhttps://github.com/ansible/ansible/blob/devel/lib/ansible/config/base.yml#L150423:58
ianwi think https://github.com/ansible/ansible/blob/devel/lib/ansible/config/base.yml#L1521 is the bit it falls into23:59
ianwthe order is /usr/bin/python then 3.7, 3.6, 3.5 ... so if py2 is installed, it's preferred23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!