opendevreview | Merged opendev/system-config master: Serve gating.dev static website https://review.opendev.org/c/opendev/system-config/+/801908 | 00:20 |
---|---|---|
Clark[m] | The gitea upgrades should be running now | 00:26 |
Clark[m] | All 8 are done. They look happy from here | 00:44 |
ianw | i don't know why infra-prod-base timed out | 01:58 |
ianw | the log file seems to just stop during fact collection, so i'm not sure what host it was trying to talk to | 01:58 |
Clark[m] | Could there be a server that isn't ssh'ing? ps often shows it on bridge it so | 02:20 |
opendevreview | Merged opendev/system-config master: system-config-roles: test centos-8-stream https://review.opendev.org/c/opendev/system-config/+/802980 | 02:24 |
ianw | yeah there's a bunch of stuck stuff, i clean up | 02:25 |
ianw | i will clean up i mean | 02:25 |
ianw | the two unresponsive hosts appear to be logstash 05 & 08 | 02:35 |
Clark[m] | You can reboot those safely | 02:49 |
ianw | look like the gating.dev certificate didn't work, and static is now unhappy | 03:09 |
ianw | gating.dev:Verify error:DNS problem: NXDOMAIN looking up TXT for _acme-challenge.gating.dev - check that a DNS record exists for this domain might be it | 03:10 |
xinliang | Hii guys, ianw: I propose a patch to fix diskimage-builder ARM64 pipeline, please help to review https://review.opendev.org/c/zuul/zuul-jobs/+/803413 | 03:36 |
xinliang | Hi guys, also please help to review openEuler diskimage-builder patch https://review.opendev.org/c/openstack/diskimage-builder/+/784363, thanks | 03:43 |
ianw | xinliang: hey, i will put them in the queue to look at | 04:13 |
ianw | the /var/lib/bind/zones/gating.dev/zone.db didn't get the _acme-challenge record update | 04:13 |
xinliang | ianw: thanks a lot | 04:14 |
ianw | oh, hang on, service-nameserver has to run for that | 04:16 |
*** ykarel|away is now known as ykarel | 05:17 | |
*** marios is now known as marios|ruck | 05:20 | |
opendevreview | Merged zuul/zuul-jobs master: Fix install podman error on Ubuntu aarch64 Bionic https://review.opendev.org/c/zuul/zuul-jobs/+/803413 | 05:31 |
*** rpittau|afk is now known as rpittau | 07:23 | |
*** jpena|off is now known as jpena | 07:36 | |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 08:37 |
*** ykarel is now known as ykarel|lunch | 09:06 | |
*** diablo_rojo is now known as Guest3447 | 09:16 | |
opendevreview | Merged openstack/project-config master: Allow elastic-recheck cores to create branches https://review.opendev.org/c/openstack/project-config/+/803473 | 09:22 |
*** ykarel|lunch is now known as ykarel | 10:23 | |
*** jpena is now known as jpena|lunch | 11:26 | |
*** ykarel_ is now known as ykarel | 11:33 | |
opendevreview | Sorin Sbârnea proposed zuul/zuul-jobs master: Include podman installation with molecule https://review.opendev.org/c/zuul/zuul-jobs/+/803471 | 11:39 |
tristanC | win 4 | 12:01 |
tristanC | sorry, keyboard failed :) | 12:14 |
opendevreview | Sorin Sbârnea proposed zuul/zuul-jobs master: Include podman installation with molecule https://review.opendev.org/c/zuul/zuul-jobs/+/803471 | 12:17 |
opendevreview | Sorin Sbârnea proposed zuul/zuul-jobs master: Include podman installation with molecule https://review.opendev.org/c/zuul/zuul-jobs/+/803471 | 12:24 |
*** jpena|lunch is now known as jpena | 12:31 | |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 12:46 |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 13:05 |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 13:37 |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 13:42 |
opendevreview | Ananya proposed opendev/elastic-recheck master: Run elastic-recheck in container https://review.opendev.org/c/opendev/elastic-recheck/+/802866 | 13:54 |
*** rpittau is now known as rpittau|afk | 14:43 | |
clarkb | fungi: do you want to review https://review.opendev.org/c/opendev/system-config/+/802922 before I update private host vars and and approve that? | 15:26 |
clarkb | it is the gerrit ssh known hosts fixup | 15:26 |
clarkb | not in a rush as I'm having a slow start this morning and need breakfast etc, but that is high on my list for when I'm caught up | 15:26 |
fungi | i can take a look in a sec, sure | 15:29 |
clarkb | fungi: it has two +2s but you were involved in the manual fixing of that so thought you may want to take a look | 15:29 |
clarkb | in exciting news I think upgrading to gerrit 3.3 might be the next big gerrit todo :) | 15:31 |
clarkb | well once known hosts are sorted out | 15:31 |
*** jpena is now known as jpena|off | 15:34 | |
clarkb | I'm editing host vars for review02 now to add in the ssh known_hosts info | 15:56 |
*** marios|ruck is now known as marios|out | 15:59 | |
clarkb | thats done. https://review.opendev.org/c/opendev/system-config/+/802922 should be good to approve | 16:00 |
fungi | yeah, i'm looking at it now, just got done rebooting my crashy workstation | 16:01 |
fungi | okay, approved it | 16:02 |
clarkb | thanks! | 16:03 |
clarkb | I made copies of the existing known_hosts files for root and gerrit2 so that we can compare or easily revert if necessary too | 16:03 |
clarkb | thats interesting we build a new image for the known hosts update. I didn't expect that, but also don't expect it to be a problem | 16:14 |
*** gibi is now known as gibi_pto | 16:38 | |
thomasb06 | hello. is this the channel of openstack? | 16:51 |
fungi | thomasb06: "OpenDev is a space for collaborative Open Source software development" | 16:52 |
clarkb | we help provide development resources to openstack | 16:52 |
fungi | this is where we run the collaboration tools used to develop software like openstack | 16:52 |
fungi | thomasb06: there is a #openstack channel | 16:53 |
thomasb06 | ah, this morning i've been asking at libera but nobody answers | 16:53 |
thomasb06 | let me try #openstack then, thank you for your help | 16:53 |
fungi | tjall of our communities moved from freenode to oftc, as you've discovered | 16:53 |
fungi | thomasb06: ^ | 16:53 |
thomasb06 | fungi: well, some move to libera. even until 2 min ago, i though all of them... | 16:54 |
fungi | we maintained backup channels on oftc for the past 6-7 years in expectation that freenode may eventually implode, so when it did we just enacted our long-standing evacuation plan | 16:57 |
thomasb06 | well done, to say the least | 16:58 |
fungi | always have a backup ;) | 16:58 |
fungi | most documentation has been updated to point users to oftc for our projects now, but if you've found some which still mentions freenode then help fixing those is appreciated | 16:59 |
thomasb06 | the page explicitly mentions oftc: https://docs.opendev.org/opendev/system-config/latest/ | 17:00 |
fungi | yep, it does look like that's been updated | 17:01 |
* thomasb06 reads to fast... | 17:01 | |
fungi | anyway, the opendev collaboratory is a suite of software development collaboration services which are utilized by communities who build a variety of projects, one of which is openstack, but the people in this channel for the most part are not developing openstack (though we are users of a bunch of donated public openstack cloud accounts to power our services) | 17:04 |
thomasb06 | regarding me, i'm searching for an open source project to get involved in. apparently openstack could be a good place to start | 17:06 |
fungi | thomasb06: with another hat on, i completely agree. openstack has a vibrant and supportive/welcoming community, though it tends to be stretched a bit thin and in need of new people interested in helping out | 17:09 |
* fungi basically runs vulnerability management for the openstack project | 17:09 | |
opendevreview | Merged opendev/system-config master: Improve gerrit known_hosts management https://review.opendev.org/c/opendev/system-config/+/802922 | 17:10 |
thomasb06 | fungi: cool, as i'm not as cs student i feared to be a bit light for giving a hand | 17:10 |
thomasb06 | if you have something for me, i take | 17:11 |
fungi | thomasb06: https://www.openstack.org/community/ is a good place to begin, it will likely land you at the contributor guide for openstack | 17:11 |
thomasb06 | great, thank you for the link | 17:12 |
fungi | as far as what specifically to work on, there's far more to choose from than i could ever hope to list | 17:12 |
fungi | thomasb06: the openstack technical committee does list some particularly desired help here: https://governance.openstack.org/tc/reference/upstream-investment-opportunities/ | 17:13 |
fungi | they also have a #openstack-tc channel here on oftc where i'm sure they'd be happy to answer questions or point you toward additional resources | 17:13 |
thomasb06 | on the link i pasted, i read that openstack is retributing companies sharing their idle computer ressources, did i misunderstood? | 17:16 |
fungi | thomasb06: i'm struggling to parse your question, but i think you're asking about the donated resources opendev uses to provide collaboration and testing services to openstack and other similar open source projects. we do utilize resources generously donated by public openstack clouds to host the systems which provide those services | 17:19 |
thomasb06 | then, i misunderstood: i though the donations could go to company sharing their idle servers... | 17:21 |
fungi | currently we have resources donated by rackspace, vexxhost, ovh, inap, citycloud, linaro, osuosl, inmotion, limestone networks, maybe others i'm forgetting at the moment | 17:21 |
thomasb06 | it's the oposite then | 17:22 |
fungi | we use those to run thnigs like our code review, continuous integration/testing, video conferencing, document editing, mailing lists, irc/matrix bots, and so on | 17:22 |
thomasb06 | understood | 17:23 |
clarkb | heh because I left a comment in the inventory path on the known hosts change all the jobs are queued to run | 17:30 |
fungi | d'oh! | 17:35 |
corvus | we had the orange sunlight this morning due to upper atmosphere smoke in the east. | 18:23 |
clarkb | corvus: we had the bad air along with it for a few days (but nowhere near as bad as last year) then it moved up high into the air and we had the weird sunlight with very good air quality | 18:25 |
fungi | weather here's nice. no swampfires yet this summer, for a change (watch i've just jinxed us now) | 18:45 |
*** odyssey4me is now known as Guest3489 | 19:03 | |
clarkb | fungi: did you still have time to test the openid email deletion thing with your secondary account? | 19:15 |
clarkb | I just remembered we had mentioend we could try that yesterday | 19:15 |
fungi | oh, yeah just a moment | 19:20 |
clarkb | fungi: I'm happy to do a screenshare or just describe the process here. Basically you need to login, then in your email settings add a second different email address and set that one to preferred. Then you can attempt to delete the email address associated with your openid and it should error | 19:23 |
clarkb | then refresh the settings page and ensure both emails are still present | 19:23 |
fungi | seems straightforward, setting up an account container in mybrowser now | 19:25 |
fungi | interesting, i can't actually sign into gerrit with that account | 19:26 |
fungi | redirects me to https://review.opendev.org/SignInFailure,SIGN_IN,Contact+site+administrator when i do | 19:27 |
clarkb | huh | 19:27 |
clarkb | does it have a conflicting email already? | 19:27 |
fungi | possibly? | 19:27 |
fungi | if it did, that would be in your audit | 19:27 |
fungi | and i'm not seeing it in there | 19:28 |
clarkb | it could eb that the account settings don't have it conflicting but when you try to login the data provided by ubuntu one is conflicting | 19:28 |
clarkb | if that makes sense | 19:28 |
clarkb | fungi: Authentication error, account inactive | 19:29 |
fungi | ahh, what's the id number? | 19:29 |
fungi | i'll set it active | 19:29 |
clarkb | not sure it doesn't seem to tell me in the error log | 19:30 |
fungi | i'll check the external-ids repo | 19:30 |
clarkb | ya if you grep for the email address there then look in the resulting files accountID is one of the fields | 19:31 |
fungi | found it by grepping for the username, but yeah, fixed and now i'm logged in | 19:35 |
clarkb | fungi: if you want to try and delete the email now it should fail because it will be preferred (assuming you have only the one email associated) | 19:35 |
clarkb | they check for that on the old gerrit too, but now if you add a second and flip it to preferred we should prevent deletion of the openid associated email too | 19:36 |
fungi | the ui doesn't allow you to delete a preferred address, the delete button is greyed out | 19:36 |
fungi | adding a secondary address now | 19:37 |
clarkb | once you've confirmed you cannot delete the openid assoicated address deleting the new secondary email that you added is probably a good sanity check that deletions work in general | 19:38 |
clarkb | I tested all that on the test node so it should all work as expected :) | 19:39 |
fungi | i'll have to switch the new address to be my preferred address first, doing that now | 19:39 |
fungi | it allowed me to delete my original address after setting the new address as preferred | 19:40 |
fungi | i take it that's bad news | 19:40 |
clarkb | you didn't get an error pop up? | 19:41 |
fungi | nope | 19:41 |
clarkb | arg | 19:41 |
fungi | checking to see what's in the external-ids ref now | 19:41 |
clarkb | and ya the next time you login you should get a new account if the external id was actually removed | 19:42 |
fungi | openid externalid entries still have the old address in them | 19:42 |
clarkb | fungi: the externalid entry still exists for the openid and accountId? | 19:42 |
fungi | yep | 19:42 |
fungi | with the original address | 19:43 |
clarkb | ok can you refresh the settings page and see if it shows you btoh addresses again? | 19:43 |
clarkb | that implies it didn't actually delete | 19:43 |
clarkb | but I'm surprised you didn't get the warning pop up thing saying error blah blah | 19:43 |
fungi | yeah, the original address is back and marked as preferred again | 19:43 |
clarkb | oh hold on | 19:44 |
clarkb | setting a new preferred email and deleting the email address is a multi step process where you have to save iirc | 19:44 |
fungi | i did not hit save changes, i'll see if that's why nothing happened | 19:44 |
clarkb | if that didn't happen then I think you simply queued the changes | 19:44 |
fungi | that's it | 19:44 |
clarkb | fungi: instead you should change the preferred then save and refresh | 19:44 |
clarkb | then try to delete the original email that will give you the error | 19:44 |
clarkb | then refresh and both should show up with new as preferred. Then you can swap back again and delete the new email | 19:45 |
clarkb | ya the UI here is really clunky :/ | 19:45 |
fungi | [An error occurred] Error 409 (Conflict): Cannot remove e-mail 'fungi-three@yuggoth.org' which is directly associated with OPENID_SSO authentication (Endpoint: /accounts/self/email/*) | 19:45 |
clarkb | perfect! | 19:45 |
clarkb | now if you refresh the settings page it should still show you both email addresses | 19:45 |
fungi | so if you delete the address in the ui it disappears, even if you don't click save | 19:45 |
clarkb | yes | 19:45 |
fungi | if you delete it and click save, you get that error | 19:45 |
thomasb06 | fungi: (was asking for help in #openstack-tc at libera back again...) | 19:45 |
clarkb | thats a UI thing indepdnent of my update | 19:45 |
fungi | thomasb06: oftc not libera | 19:46 |
thomasb06 | maybe now I'll remember | 19:46 |
fungi | all of openstack moved from freenode to oftc | 19:46 |
fungi | not to libera | 19:46 |
clarkb | fungi: now we should confirm that if you swap the preferred email address back that you can delete the new email address (email deletion generaly works confirmation) | 19:46 |
thomasb06 | need to change my config once for all | 19:46 |
fungi | clarkb: yeah, testing that next | 19:47 |
fungi | clarkb: it allowed me to do that, as expected | 19:47 |
fungi | so i think this all checks out | 19:47 |
clarkb | great I think that means the bugfix is working as expected. Thank you for double checking | 19:48 |
clarkb | I won't spam all the mailing lists about that again, but if peopel ask us questions we can be fairly confident that gerrit won't let them do the wrong thing anymore | 19:48 |
fungi | refreshing the external-ids ref, the new address is gone again too | 19:48 |
fungi | i'm putting that account back to inactive again. i remember now i did that so that it wouldn't show up in autocompletion for people trying to find me | 19:49 |
fungi | since it confused some folks | 19:49 |
clarkb | fungi: sounds good, thanks again | 19:50 |
clarkb | and now i need to go review the merge into master change upstream. The stable-3.4 change landed | 19:59 |
clarkb | ok ssh known_hosts have updated on review for gerrit2 and root | 20:05 |
clarkb | running gerrit ls-projects continues to work so we didn't break that | 20:06 |
clarkb | I think we're good | 20:06 |
fungi | yep, lgtm | 20:07 |
clarkb | my first run was against localhost the second against review.opendev.org both worked but when I did review.opendev.org it also added the key for the ip address | 20:07 |
clarkb | I Guess that is expected sicne we don't put the ip address in the listing managed by ansible and i think that is ok | 20:08 |
clarkb | ya lgtm | 20:10 |
corvus | infra-root: due to an amazing review push from clarkb and tobiash on changes from swest and felixedel, all of the changes in zuul to implement moving the merge requests from gearman to zk, and also using cached config on restarts are approved. once they land, i think it's worth restarting zuul to start using those. and also, that should be the last restart that takes 20-30m because of cat jobs! | 20:17 |
corvus | so really, once those land, i'd like to restart zuul twice :) | 20:17 |
tobiash[m] | looking forward to see the improvement :) | 20:17 |
clarkb | corvus: we need to restart twice to exercise the faster startup? | 20:19 |
clarkb | just making sure I understand the process. I don't think thati s ap roblem | 20:19 |
corvus | clarkb: i believe so, yes. i don't think quite all the info will be in zk for the first startup to be fast | 20:20 |
clarkb | got it | 20:21 |
fungi | corvus: i'm very much in favor. can't wait to see it in production | 20:22 |
*** dviroel is now known as dviroel|out | 20:23 | |
corvus | incidentally, these same changes are also the first changes where we added a second scheduler to a unit test. we can't do more than load the config with 2 schedulers yet, but we can get that far. it's a pretty cool milestone. :) | 20:26 |
fungi | awesome! | 20:29 |
opendevreview | Merged zuul/zuul-jobs master: Remove success-url https://review.opendev.org/c/zuul/zuul-jobs/+/802974 | 20:53 |
clarkb | fungi: any chance you want to review this small puppet cleanup? https://review.opendev.org/c/opendev/system-config/+/803518 | 21:42 |
opendevreview | Merged opendev/system-config master: Cleanup unused puppet modules from modules.env https://review.opendev.org/c/opendev/system-config/+/803518 | 23:31 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!