ianw | clarkb: yeah, i forget how it works but does nodepool know which image type uploads or is that in the sdk? | 00:00 |
---|---|---|
clarkb | I think it queries it from the sdk in order to pick the file to upload | 00:00 |
ianw | but the idea, marking an image type as "delete after upload" might work | 00:00 |
ianw | nb02 is freeing up a lot more space | 00:11 |
ianw | i think if it dies, and all the load goes to 01, then it runs tight on space | 00:11 |
clarkb | hrm maybe balance is the issue then. We can probably leave nb01 off and let nb02 catch up a bit before turning nb01 back on? | 00:12 |
ianw | kind of like the opposite of HA. if i go i'm taking you with me :) | 00:12 |
ianw | i have rebooted nb01, but i'll keep an eye | 00:13 |
*** tosky has quit IRC | 00:18 | |
clarkb | fungi: is there anything else you think we should do before I call it a day? | 00:21 |
fungi | clarkb: nope, i think we're all set | 00:24 |
ianw | fungi: i didn't quite follow the ! redirect suggestion; do you know of an example | 00:31 |
ianw | it would be good to correctly 302 the openstack site, rather than just respond | 00:31 |
ianw | 301 even | 00:31 |
*** brinzhang has joined #opendev | 00:34 | |
*** brinzhang_ has quit IRC | 00:35 | |
ianw | Nov 20 00:35:46 codesearch01 docker-hound[34841]: 2020/11/20 00:35:46 Failed to clone https://opendev.org/x/ansible-role-jenkins-job-builder, see output below | 00:36 |
ianw | Nov 20 00:35:46 codesearch01 docker-hound[34841]: Cloning into 'vcs-41431689fe42528a0152120546e2265453241950'... | 00:36 |
ianw | Nov 20 00:35:46 codesearch01 docker-hound[34841]: fatal: unable to access 'https://opendev.org/x/ansible-role-jenkins-job-builder/': Failed to connect to opendev.org port 443: Connection refused | 00:36 |
ianw | Nov 20 00:35:46 codesearch01 docker-hound[34841]: Continuing... | 00:36 |
fungi | RewriteCond %{HTTP_HOST} !^codesearch\.opendev\.org [nocase] | 00:37 |
fungi | RewriteRule ^/(.*) http://codesearch.opendev.org/$1 [last,redirect=permanent] | 00:37 |
fungi | ianw: ^ that's how i do it on some of my sites, not sure if we have a good example | 00:38 |
ianw | let me try a quick live edit, and if good we can commit | 00:38 |
fungi | looks like review.o.o and etherpad.o.o are using separate vhosts to accomplish that instead | 00:38 |
fungi | this can become our example though | 00:39 |
fungi | it's generally good practice, especially if you're serving content you want search engines to index (less so for codesearch i guess) because 1. it stops them from crawling your server multiple times under different domains, and 2. it avoids diluting search results with multiple copies of the same set of content | 00:40 |
ianw | hrm, i guess we need serveralises though? | 00:40 |
fungi | only if it's not the default vhost i think | 00:41 |
ianw | http://codesearch01.opendev.org/ doesn't seem to match | 00:41 |
fungi | http://codesearch01.opendev.org/ is already going to get rewritten by the other redirect from http to https | 00:41 |
fungi | is rewriteengine on? | 00:42 |
fungi | and mod_rewrite needs to be loaded too (though it likely already is) | 00:42 |
ianw | hang on, i removed the other redirect | 00:43 |
fungi | oh, you added it under http | 00:43 |
fungi | i meant to say use https, sorry | 00:44 |
ianw | ok, codesearch01.opendev.org seems to redirect now | 00:45 |
fungi | so the port 80 vhost still needs an unconditional redirect to https://codesearch01.opendev.org/ and then the port 443 vhost needs the ! pattern redirect to https://codesearch.opendev.org/$1 | 00:45 |
fungi | yep, what you've edited on the server looks like what i meant | 00:45 |
ianw | ok, and the openstack.org site should match because it's the default site, and then get redirected to https, and then get redirected to opendev.org | 00:46 |
fungi | exactly | 00:46 |
fungi | well, http://codesearch.openstack.org/ will only hit one redirect because we specify the destination in the http to https redirect as the new domain | 00:47 |
fungi | we didn't previously serve a working https://codesearch.openstack.org/ which is why i said it's not that critical in this case | 00:47 |
fungi | but still nice to have | 00:48 |
fungi | in case someone happens to type in https://codesearch.openstack.org/ for some reason | 00:48 |
fungi | for some other sites like review or eavesdrop, doing that would probably allow us to drop the extra vhosts which are only serving redirects | 00:48 |
fungi | but again, it's working as is, so little incentive to change that | 00:49 |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: redirect other hostnames to codesearch.opendev.org https://review.opendev.org/763486 | 00:49 |
ianw | i'm going to restart the container, and see what's up with those few access failures | 00:50 |
*** mlavalle has quit IRC | 00:50 | |
ianw | #status log cleared /opt on nb01 & nb02 which had filled up, and restarted | 00:51 |
openstackstatus | ianw: finished logging | 00:51 |
ianw | btw you can specify branches to hound. so, if somebody was interested, they could theoretically create a separate indexer for say, "victoria" by walking all projects, finding out which ones had a victoria branch, and building a config file | 00:55 |
ianw | we could run that as a separate container, and apache map it to codesearch.opendev.org/victoria and so forth | 00:56 |
ianw | it got everything indexing this time, no ssl errors | 00:57 |
clarkb | neat | 00:57 |
ianw | i'll switch the cname now, and that will be done, and i'll keep watching it for the next few hours | 00:59 |
*** sean-k-mooney1 has joined #opendev | 01:00 | |
pabelanger | where can I find the playbook that manages the SSL cert on https://insecure-ci-registry.opendev.org:5000/ | 01:02 |
pabelanger | my question is, was looking for letsencrypt hook to restart the registry | 01:03 |
clarkb | pabelanger: https://opendev.org/opendev/system-config/src/branch/master/playbooks/letsencrypt.yaml | 01:03 |
clarkb | I think we juts down up the container with docker compose | 01:03 |
*** sean-k-mooney has quit IRC | 01:03 | |
pabelanger | https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/letsencrypt-create-certs/handlers/restart_zuul_registry.yaml | 01:04 |
pabelanger | thanks! | 01:04 |
ianw | wikimedia have written a different frondend https://gerrit.wikimedia.org/g/labs/codesearch | 01:38 |
openstackgerrit | Merged opendev/system-config master: codesearch: redirect other hostnames to codesearch.opendev.org https://review.opendev.org/763486 | 01:50 |
*** sean-k-mooney2 has joined #opendev | 02:15 | |
*** sean-k-mooney1 has quit IRC | 02:17 | |
*** jhesketh has quit IRC | 02:27 | |
*** jhesketh has joined #opendev | 02:33 | |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: Add robots.txt https://review.opendev.org/763499 | 03:16 |
ianw | #status codesearch.openstack.org replaced by codesearch.opendev.org | 03:19 |
openstackstatus | ianw: unknown command | 03:19 |
ianw | #status log codesearch.openstack.org replaced by codesearch.opendev.org | 03:19 |
openstackstatus | ianw: finished logging | 03:19 |
openstackgerrit | Merged opendev/system-config master: base: Remove rsyslogd reinstall https://review.opendev.org/763431 | 03:35 |
*** iurygregory has quit IRC | 03:42 | |
*** d34dh0r53 has quit IRC | 03:48 | |
*** hamalq has quit IRC | 03:56 | |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: Add robots.txt https://review.opendev.org/763499 | 04:04 |
*** zaro has joined #opendev | 04:07 | |
openstackgerrit | Ian Wienand proposed opendev/system-config master: etherpad: fix robots.txt https://review.opendev.org/763502 | 04:08 |
*** tkajinam has quit IRC | 04:40 | |
*** tkajinam has joined #opendev | 04:40 | |
*** zaro has quit IRC | 04:59 | |
ianw | ERROR: for hound toomanyrequests: You have reached your pull rate limit. You may increase the limit by authenticating and upgrading: https://www.docker.com/increase-rate-limit | 05:10 |
ianw | this might be the first time we've seen this | 05:11 |
ianw | i got 3 failures in https://review.opendev.org/#/c/756605/ | 05:14 |
ianw | ... and all in limestone | 05:15 |
ianw | i guess that goes through a ipv4 NAT | 05:16 |
ianw | i guess that a) docker doesn't do ipv6 and b) rate-limiting on ipv6 by address would be fairly useless, with privacy extensions basically breaking that before you even start thinking about bad actors | 05:18 |
*** marios has joined #opendev | 05:51 | |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: Add robots.txt https://review.opendev.org/763499 | 05:51 |
openstackgerrit | Ian Wienand proposed opendev/system-config master: etherpad: fix robots.txt https://review.opendev.org/763502 | 05:51 |
*** DSpider has joined #opendev | 05:58 | |
*** ykarel_ has joined #opendev | 06:24 | |
*** ralonsoh has joined #opendev | 06:25 | |
openstackgerrit | Merged openstack/project-config master: Add Magpie charm to OpenStack charms https://review.opendev.org/762819 | 06:29 |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: Add robots.txt https://review.opendev.org/763499 | 06:30 |
openstackgerrit | Ian Wienand proposed opendev/system-config master: etherpad: fix robots.txt https://review.opendev.org/763502 | 06:30 |
*** marios is now known as marios|ruck | 06:51 | |
*** rpittau|afk is now known as rpittau | 06:52 | |
*** sboyron has joined #opendev | 07:04 | |
*** lpetrut has joined #opendev | 07:13 | |
*** eolivare has joined #opendev | 07:21 | |
*** ykarel_ is now known as ykarel | 07:35 | |
*** iurygregory has joined #opendev | 07:39 | |
*** roman_g has joined #opendev | 07:44 | |
openstackgerrit | Ian Wienand proposed opendev/system-config master: codesearch: Add robots.txt https://review.opendev.org/763499 | 08:13 |
openstackgerrit | Ian Wienand proposed opendev/system-config master: etherpad: fix robots.txt https://review.opendev.org/763502 | 08:13 |
*** andrewbonney has joined #opendev | 08:28 | |
*** mgoddard has joined #opendev | 08:44 | |
openstackgerrit | Merged opendev/system-config master: docker: install rsyslog to capture container output https://review.opendev.org/756605 | 09:12 |
*** hashar has joined #opendev | 09:26 | |
*** tosky has joined #opendev | 09:57 | |
*** dtantsur|afk is now known as dtantsur | 09:57 | |
*** openstackgerrit has quit IRC | 10:25 | |
*** mgoddard has quit IRC | 10:28 | |
*** mgoddard has joined #opendev | 10:42 | |
*** sean-k-mooney2 is now known as sean-k-mooney | 11:50 | |
*** hashar has quit IRC | 12:27 | |
*** dmellado has quit IRC | 12:38 | |
*** dmellado has joined #opendev | 12:46 | |
*** hashar has joined #opendev | 12:53 | |
*** openstackgerrit has joined #opendev | 12:54 | |
openstackgerrit | Merged opendev/irc-meetings master: Push back Large Scale SIG meeting by one hour https://review.opendev.org/763227 | 12:54 |
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org will be offline starting at 15:00 UTC (roughly two hours from now) for a weekend upgrade maintenance: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html | 13:01 | |
*** chandankumar is now known as raukadah | 13:47 | |
*** d34dh0r53 has joined #opendev | 13:54 | |
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org will be offline starting at 15:00 UTC (roughly one hour from now) for a weekend upgrade maintenance: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html | 13:59 | |
openstackgerrit | Dmitry Tantsur proposed openstack/diskimage-builder master: Fix dynamic-login with grub2 https://review.opendev.org/763566 | 14:02 |
*** dmellado has quit IRC | 14:09 | |
*** dmellado has joined #opendev | 14:11 | |
*** mgoddard has quit IRC | 14:25 | |
*** rpittau is now known as rpittau|afk | 14:53 | |
-openstackstatus- NOTICE: The Gerrit service at review.opendev.org is offline for a weekend upgrade maintenance, updates will be provided once it's available again: http://lists.opendev.org/pipermail/service-announce/2020-October/000012.html | 15:03 | |
corvus | clarkb, fungi: the action is in #opendev-meeting right? | 15:06 |
clarkb | yes | 15:06 |
fungi | correct-o | 15:08 |
fungi | also being logged as a "meeting" under the opendev-maint name we've been using | 15:08 |
*** lpetrut has quit IRC | 15:10 | |
*** mlavalle has joined #opendev | 15:20 | |
*** ykarel has quit IRC | 15:41 | |
*** mgoddard has joined #opendev | 15:41 | |
*** fressi has quit IRC | 16:08 | |
*** ttx has quit IRC | 16:39 | |
*** ttx has joined #opendev | 16:45 | |
*** marios|ruck is now known as marios|out | 16:55 | |
*** tosky has quit IRC | 16:56 | |
*** roman_g has quit IRC | 17:10 | |
*** eolivare has quit IRC | 17:16 | |
*** marios|out has quit IRC | 17:18 | |
*** hashar has quit IRC | 17:46 | |
*** slaweq has quit IRC | 17:49 | |
*** hamalq has joined #opendev | 17:51 | |
*** mgoddard has quit IRC | 17:51 | |
*** slaweq has joined #opendev | 18:00 | |
*** hamalq has quit IRC | 18:01 | |
*** hamalq has joined #opendev | 18:02 | |
*** ralonsoh has quit IRC | 18:04 | |
*** tosky has joined #opendev | 18:10 | |
*** andrewbonney has quit IRC | 18:25 | |
*** gouthamr_ has quit IRC | 18:30 | |
*** yoctozepto has quit IRC | 18:37 | |
*** yoctozepto has joined #opendev | 18:38 | |
*** gouthamr_ has joined #opendev | 18:46 | |
*** tosky has quit IRC | 19:13 | |
*** dtantsur is now known as dtantsur|afk | 19:15 | |
*** auristor has quit IRC | 19:49 | |
*** auristor has joined #opendev | 19:50 | |
*** auristor has quit IRC | 19:52 | |
*** auristor has joined #opendev | 19:54 | |
*** iurygregory has quit IRC | 20:42 | |
*** iurygregory has joined #opendev | 20:59 | |
*** fressi has joined #opendev | 21:52 | |
*** sboyron has quit IRC | 22:02 | |
*** DSpider has quit IRC | 22:07 | |
*** DSpider has joined #opendev | 22:08 | |
*** DSpider has quit IRC | 22:27 | |
*** fressi has quit IRC | 22:35 | |
*** diablo_rojo_phon has quit IRC | 22:49 | |
*** knikolla has quit IRC | 22:50 | |
*** knikolla has joined #opendev | 22:52 | |
*** iurygregory has quit IRC | 23:22 | |
*** whoami-rajat__ has quit IRC | 23:33 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!