Friday, 2020-11-20

ianwclarkb: yeah, i forget how it works but does nodepool know which image type uploads or is that in the sdk?00:00
clarkbI think it queries it from the sdk in order to pick the file to upload00:00
ianwbut the idea, marking an image type as "delete after upload" might work00:00
ianwnb02 is freeing up a lot more space00:11
ianwi think if it dies, and all the load goes to 01, then it runs tight on space00:11
clarkbhrm maybe balance is the issue then. We can probably leave nb01 off and let nb02 catch up a bit before turning nb01 back on?00:12
ianwkind of like the opposite of HA.  if i go i'm taking you with me :)00:12
ianwi have rebooted nb01, but i'll keep an eye00:13
*** tosky has quit IRC00:18
clarkbfungi: is there anything else you think we should do before I call it a day?00:21
fungiclarkb: nope, i think we're all set00:24
ianwfungi: i didn't quite follow the ! redirect suggestion; do you know of an example00:31
ianwit would be good to correctly 302 the openstack site, rather than just respond00:31
ianw301 even00:31
*** brinzhang has joined #opendev00:34
*** brinzhang_ has quit IRC00:35
ianwNov 20 00:35:46 codesearch01 docker-hound[34841]: 2020/11/20 00:35:46 Failed to clone https://opendev.org/x/ansible-role-jenkins-job-builder, see output below00:36
ianwNov 20 00:35:46 codesearch01 docker-hound[34841]: Cloning into 'vcs-41431689fe42528a0152120546e2265453241950'...00:36
ianwNov 20 00:35:46 codesearch01 docker-hound[34841]: fatal: unable to access 'https://opendev.org/x/ansible-role-jenkins-job-builder/': Failed to connect to opendev.org port 443: Connection refused00:36
ianwNov 20 00:35:46 codesearch01 docker-hound[34841]: Continuing...00:36
fungiRewriteCond %{HTTP_HOST} !^codesearch\.opendev\.org [nocase]00:37
fungiRewriteRule ^/(.*) http://codesearch.opendev.org/$1 [last,redirect=permanent]00:37
fungiianw: ^ that's how i do it on some of my sites, not sure if we have a good example00:38
ianwlet me try a quick live edit, and if good we can commit00:38
fungilooks like review.o.o and etherpad.o.o are using separate vhosts to accomplish that instead00:38
fungithis can become our example though00:39
fungiit's generally good practice, especially if you're serving content you want search engines to index (less so for codesearch i guess) because 1. it stops them from crawling your server multiple times under different domains, and 2. it avoids diluting search results with multiple copies of the same set of content00:40
ianwhrm, i guess we need serveralises though?00:40
fungionly if it's not the default vhost i think00:41
ianwhttp://codesearch01.opendev.org/ doesn't seem to match00:41
fungihttp://codesearch01.opendev.org/ is already going to get rewritten by the other redirect from http to https00:41
fungiis rewriteengine on?00:42
fungiand mod_rewrite needs to be loaded too (though it likely already is)00:42
ianwhang on, i removed the other redirect00:43
fungioh, you added it under http00:43
fungii meant to say use https, sorry00:44
ianwok, codesearch01.opendev.org seems to redirect now00:45
fungiso the port 80 vhost still needs an unconditional redirect to https://codesearch01.opendev.org/ and then the port 443 vhost needs the ! pattern redirect to https://codesearch.opendev.org/$100:45
fungiyep, what you've edited on the server looks like what i meant00:45
ianwok, and the openstack.org site should match because it's the default site, and then get redirected to https, and then get redirected to opendev.org00:46
fungiexactly00:46
fungiwell, http://codesearch.openstack.org/ will only hit one redirect because we specify the destination in the http to https redirect as the new domain00:47
fungiwe didn't previously serve a working https://codesearch.openstack.org/ which is why i said it's not that critical in this case00:47
fungibut still nice to have00:48
fungiin case someone happens to type in https://codesearch.openstack.org/ for some reason00:48
fungifor some other sites like review or eavesdrop, doing that would probably allow us to drop the extra vhosts which are only serving redirects00:48
fungibut again, it's working as is, so little incentive to change that00:49
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: redirect other hostnames to codesearch.opendev.org  https://review.opendev.org/76348600:49
ianwi'm going to restart the container, and see what's up with those few access failures00:50
*** mlavalle has quit IRC00:50
ianw#status log cleared /opt on nb01 & nb02 which had filled up, and restarted00:51
openstackstatusianw: finished logging00:51
ianwbtw you can specify branches to hound.  so, if somebody was interested, they could theoretically create a separate indexer for say, "victoria" by walking all projects, finding out which ones had a victoria branch, and building a config file00:55
ianwwe could run that as a separate container, and apache map it to codesearch.opendev.org/victoria and so forth00:56
ianwit got everything indexing this time, no ssl errors00:57
clarkbneat00:57
ianwi'll switch the cname now, and that will be done, and i'll keep watching it for the next few hours00:59
*** sean-k-mooney1 has joined #opendev01:00
pabelangerwhere can I find the playbook that manages the SSL cert on https://insecure-ci-registry.opendev.org:5000/01:02
pabelangermy question is, was looking for letsencrypt hook to restart the registry01:03
clarkbpabelanger: https://opendev.org/opendev/system-config/src/branch/master/playbooks/letsencrypt.yaml01:03
clarkbI think we juts down up the container with docker compose01:03
*** sean-k-mooney has quit IRC01:03
pabelangerhttps://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/letsencrypt-create-certs/handlers/restart_zuul_registry.yaml01:04
pabelangerthanks!01:04
ianwwikimedia have written a different frondend https://gerrit.wikimedia.org/g/labs/codesearch01:38
openstackgerritMerged opendev/system-config master: codesearch: redirect other hostnames to codesearch.opendev.org  https://review.opendev.org/76348601:50
*** sean-k-mooney2 has joined #opendev02:15
*** sean-k-mooney1 has quit IRC02:17
*** jhesketh has quit IRC02:27
*** jhesketh has joined #opendev02:33
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: Add robots.txt  https://review.opendev.org/76349903:16
ianw#status codesearch.openstack.org replaced by codesearch.opendev.org03:19
openstackstatusianw: unknown command03:19
ianw#status log codesearch.openstack.org replaced by codesearch.opendev.org03:19
openstackstatusianw: finished logging03:19
openstackgerritMerged opendev/system-config master: base: Remove rsyslogd reinstall  https://review.opendev.org/76343103:35
*** iurygregory has quit IRC03:42
*** d34dh0r53 has quit IRC03:48
*** hamalq has quit IRC03:56
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: Add robots.txt  https://review.opendev.org/76349904:04
*** zaro has joined #opendev04:07
openstackgerritIan Wienand proposed opendev/system-config master: etherpad: fix robots.txt  https://review.opendev.org/76350204:08
*** tkajinam has quit IRC04:40
*** tkajinam has joined #opendev04:40
*** zaro has quit IRC04:59
ianwERROR: for hound  toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit05:10
ianwthis might be the first time we've seen this05:11
ianwi got 3 failures in https://review.opendev.org/#/c/756605/05:14
ianw... and all in limestone05:15
ianwi guess that goes through a ipv4 NAT05:16
ianwi guess that a) docker doesn't do ipv6 and b) rate-limiting on ipv6 by address would be fairly useless, with privacy extensions basically breaking that before you even start thinking about bad actors05:18
*** marios has joined #opendev05:51
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: Add robots.txt  https://review.opendev.org/76349905:51
openstackgerritIan Wienand proposed opendev/system-config master: etherpad: fix robots.txt  https://review.opendev.org/76350205:51
*** DSpider has joined #opendev05:58
*** ykarel_ has joined #opendev06:24
*** ralonsoh has joined #opendev06:25
openstackgerritMerged openstack/project-config master: Add Magpie charm to OpenStack charms  https://review.opendev.org/76281906:29
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: Add robots.txt  https://review.opendev.org/76349906:30
openstackgerritIan Wienand proposed opendev/system-config master: etherpad: fix robots.txt  https://review.opendev.org/76350206:30
*** marios is now known as marios|ruck06:51
*** rpittau|afk is now known as rpittau06:52
*** sboyron has joined #opendev07:04
*** lpetrut has joined #opendev07:13
*** eolivare has joined #opendev07:21
*** ykarel_ is now known as ykarel07:35
*** iurygregory has joined #opendev07:39
*** roman_g has joined #opendev07:44
openstackgerritIan Wienand proposed opendev/system-config master: codesearch: Add robots.txt  https://review.opendev.org/76349908:13
openstackgerritIan Wienand proposed opendev/system-config master: etherpad: fix robots.txt  https://review.opendev.org/76350208:13
*** andrewbonney has joined #opendev08:28
*** mgoddard has joined #opendev08:44
openstackgerritMerged opendev/system-config master: docker: install rsyslog to capture container output  https://review.opendev.org/75660509:12
*** hashar has joined #opendev09:26
*** tosky has joined #opendev09:57
*** dtantsur|afk is now known as dtantsur09:57
*** openstackgerrit has quit IRC10:25
*** mgoddard has quit IRC10:28
*** mgoddard has joined #opendev10:42
*** sean-k-mooney2 is now known as sean-k-mooney11:50
*** hashar has quit IRC12:27
*** dmellado has quit IRC12:38
*** dmellado has joined #opendev12:46
*** hashar has joined #opendev12:53
*** openstackgerrit has joined #opendev12:54
openstackgerritMerged opendev/irc-meetings master: Push back Large Scale SIG meeting by one hour  https://review.opendev.org/76322712:54
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org will be offline starting at 15:00 UTC (roughly two hours from now) for a weekend upgrade maintenance: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html13:01
*** chandankumar is now known as raukadah13:47
*** d34dh0r53 has joined #opendev13:54
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org will be offline starting at 15:00 UTC (roughly one hour from now) for a weekend upgrade maintenance: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html13:59
openstackgerritDmitry Tantsur proposed openstack/diskimage-builder master: Fix dynamic-login with grub2  https://review.opendev.org/76356614:02
*** dmellado has quit IRC14:09
*** dmellado has joined #opendev14:11
*** mgoddard has quit IRC14:25
*** rpittau is now known as rpittau|afk14:53
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org is offline for a weekend upgrade maintenance, updates will be provided once it's available again: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html15:03
corvusclarkb, fungi: the action is in #opendev-meeting right?15:06
clarkbyes15:06
fungicorrect-o15:08
fungialso being logged as a "meeting" under the opendev-maint name we've been using15:08
*** lpetrut has quit IRC15:10
*** mlavalle has joined #opendev15:20
*** ykarel has quit IRC15:41
*** mgoddard has joined #opendev15:41
*** fressi has quit IRC16:08
*** ttx has quit IRC16:39
*** ttx has joined #opendev16:45
*** marios|ruck is now known as marios|out16:55
*** tosky has quit IRC16:56
*** roman_g has quit IRC17:10
*** eolivare has quit IRC17:16
*** marios|out has quit IRC17:18
*** hashar has quit IRC17:46
*** slaweq has quit IRC17:49
*** hamalq has joined #opendev17:51
*** mgoddard has quit IRC17:51
*** slaweq has joined #opendev18:00
*** hamalq has quit IRC18:01
*** hamalq has joined #opendev18:02
*** ralonsoh has quit IRC18:04
*** tosky has joined #opendev18:10
*** andrewbonney has quit IRC18:25
*** gouthamr_ has quit IRC18:30
*** yoctozepto has quit IRC18:37
*** yoctozepto has joined #opendev18:38
*** gouthamr_ has joined #opendev18:46
*** tosky has quit IRC19:13
*** dtantsur is now known as dtantsur|afk19:15
*** auristor has quit IRC19:49
*** auristor has joined #opendev19:50
*** auristor has quit IRC19:52
*** auristor has joined #opendev19:54
*** iurygregory has quit IRC20:42
*** iurygregory has joined #opendev20:59
*** fressi has joined #opendev21:52
*** sboyron has quit IRC22:02
*** DSpider has quit IRC22:07
*** DSpider has joined #opendev22:08
*** DSpider has quit IRC22:27
*** fressi has quit IRC22:35
*** diablo_rojo_phon has quit IRC22:49
*** knikolla has quit IRC22:50
*** knikolla has joined #opendev22:52
*** iurygregory has quit IRC23:22
*** whoami-rajat__ has quit IRC23:33

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!