clarkb | frickler: fungi: re paramiko update and ssh-rsa that will affect gerritbot and zuul I think | 01:34 |
---|---|---|
clarkb | I'm not in a good spot to do anything about it at the moment but I figured calling it out would at least avoid surprises if those processes are restarted and stop working | 01:34 |
clarkb | I think we should consider running them with ed25519 keys instead of rsa rather than pinning paramiko | 01:34 |
fungi | yeah, i agree with your assessment | 02:03 |
frickler | connecting to gerrit with latest paramiko seems to work fine, since gerrit does in fact support rsa-sha2-512. the problem with cirros is that its old dropbear version does not | 06:25 |
frickler | infra-root: 821328 seems to have broken accessbot. bit concerning that testing doesn't seem to have covered this. https://paste.opendev.org/show/811883/ https://zuul.opendev.org/t/openstack/builds?job_name=infra-prod-run-accessbot&project=opendev/system-config | 06:50 |
opendevreview | Sunyeop Lee proposed opendev/git-review master: Fix git_review.cmd.CommandFailed: <exception str() failed> https://review.opendev.org/c/opendev/git-review/+/823130 | 07:35 |
fungi | frickler: yep, looks like system-config-run-eavesdrop doesn't exercise accessbot at all | 12:26 |
fungi | we use yaml.safe_load() in check_irc_access.py but that's a completely parallel codebase | 12:29 |
fungi | we'll need to put some thought into how to run accessbot from a test node, probably something like combining its --noop option with some new feature to bypass authenticating and just use a random nick | 12:36 |
fungi | right now the only way i can think of to run the current state of accessbot is in production | 12:39 |
fungi | so it'll need to be altered to allow for testing | 12:39 |
fungi | we should probably reimplement check_irc_access.py within accessbot somehow | 12:40 |
opendevreview | Jeremy Stanley proposed opendev/system-config master: Use yaml.safe_load() in accessbot https://review.opendev.org/c/opendev/system-config/+/823205 | 12:45 |
opendevreview | Jeremy Stanley proposed opendev/engagement master: Initial commit https://review.opendev.org/c/opendev/engagement/+/729293 | 14:00 |
*** Tengu__ is now known as Tengu | 19:44 | |
fungi | feedback is being sought on a new `pip resolve` subcommand (semantics, features, functionality): https://github.com/pypa/pip/pull/10748 | 21:59 |
fungi | https://discuss.python.org/t/12341 | 22:00 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!