Tuesday, 2022-01-04

*** rlandy|ruck is now known as rlandy|ruck|out01:00
*** rlandy|ruck|out is now known as rlandy|out01:00
*** pojadhav|pto is now known as pojadhav05:02
*** akahat|PTO is now known as akahat06:02
*** akahat is now known as akahat|ruck06:30
*** ysandeep is now known as ysandeep|afk07:14
*** ykarel_ is now known as ykarel08:23
*** bhagyashris_ is now known as bhagyashris08:45
*** ysandeep|afk is now known as ysandeep09:16
opendevreviewchandan kumar proposed zuul/zuul-jobs master: Introduce iptables_package var  https://review.opendev.org/c/zuul/zuul-jobs/+/82250309:33
opendevreviewchandan kumar proposed zuul/zuul-jobs master: Introduce iptables_package var  https://review.opendev.org/c/zuul/zuul-jobs/+/82250309:37
*** ysandeep is now known as ysandeep|coffee10:15
*** rlandy|out is now known as rlandy|ruck11:02
*** dviroel_ is now known as dviroel|rover11:16
*** ysandeep|coffee is now known as ysandeep11:23
artomWell then. It begins anew.13:29
artom... but it begins poorly. Wrong channel :(13:29
*** ykarel__ is now known as ykarel13:57
hrwis there an official way I can use to remove account 34360 and use marcin.juszkiewicz@linaro.org as email in 24072 account?14:01
hrwI created 34360 one during LP 2FA accident14:02
hrwI cannot just add other email and remove that one: "Error 409 (Conflict): Cannot remove e-mail 'marcin.juszkiewicz@linaro.org' which is directly associated with OPENID_SSO authentication"14:04
opendevreviewMerged openstack/project-config master: Disable nodepool temporarily  https://review.opendev.org/c/openstack/project-config/+/82036914:10
fungihrw: we've been working to clean up account conflicts and are down to a scant ~10% of the hundreds we started with. clarkb's been heading up that effort and can probably make the best recommendations for how (and when) to proceed with fixing that one14:16
fungithe good news is that the error you're getting is what prevents gerrit from making more conflicting accounts now that we've upgraded. the bad news is that its consistency checker won't let us clean up the existing conflicts easily (unless we can do them all in one batch), so we've been finding workarounds to be able to make incremental progress until we have the final batch as small as possible14:17
opendevreviewArnaud Morin proposed openstack/project-config master: Revert "Disable nodepool temporarily"  https://review.opendev.org/c/openstack/project-config/+/82335714:23
hrwfungi: thanks.14:30
hrwthe only downside is that https://review.opendev.org/c/openstack/kolla/+/823398 is on other account than usual. but once it is in gerrit it is project's not mine (as 'everyone can push fixes')14:33
*** ysandeep is now known as ysandeep|afk14:41
*** dviroel|rover is now known as dviroel|rover|lunch14:57
*** ysandeep|afk is now known as ysandeep15:21
*** dviroel|rover|lunch is now known as dviroel|rover15:48
clarkbhrw: fungi: what we can do is "retire" the account (disable it and remove its preferred email setting) then the hack is to delete its openid entries via the rest api16:38
clarkbwe can revert the retirement but not the deletion of openid entries easily16:38
clarkbI can walk someone through that later this week or do it myself next week likely16:38
hrwclarkb: 34360 account can go away and there is no rush16:59
clarkbhrw: ok, I'll get to it when I'm back to the normal day to day17:01
hrwclarkb: thanks!17:02
opendevreviewClark Boylan proposed opendev/system-config master: Update gitea to v1.15.9  https://review.opendev.org/c/opendev/system-config/+/82302717:16
clarkbgitea made another bugfix release. That just shifts our upgrade change ahead to the latest version17:16
clarkbstill no template deltas in git diff17:16
jrosser_i've just started hacking on some centos-9 stream support in OSA, and am having some trouble with git-review17:18
clarkbare you using rsa keys?17:19
jrosser_when trying to set up the git hooks it looks like the scp command is trying to use the sftp subsystem rather than scp, and it fails17:19
jrosser_ah i've already fixed the keys thing17:19
clarkbso git review -s fails to scp the hook?17:20
clarkbdo you have a traceback and related output?17:20
jrosser_heres what happened out-of-the box https://paste.opendev.org/show/811914/17:20
clarkbI wonder if this is part of the scp deprecation so centos is using sftp?17:21
jrosser_i can't really see why it's choosing sftp, and passing -O to the scp command makes it work17:21
clarkbI'm on OpenSSH_8.8p1 and don't have this problem17:22
clarkboh but with older openssl17:23
clarkbis scp actually sftp via alternatives or simmilar?17:24
jrosser_they're different binaries17:25
fungidebug1: pledge: filesystem full17:25
fungithat's... odd17:25
jrosser_i think thats badly worded "full access"17:27
clarkbI get that too. But I get `debug1: Sending command: scp -v -f hooks/commit-msg`17:27
clarkbso this apperas centos-9 specific to their build of openssh17:27
clarkbpossibly coming to other distros but not there yet17:27
fungii'm still on openssh 8.7p1, and the scp manpage indicates -O is on by default. is it off by default in 8.8p1?17:27
jrosser_right from the word go (line 2 of the paste) it says sftp17:28
clarkbfungi: it may not log it as a default?17:29
jrosser_my man page says " Use the legacy SCP protocol for file transfers instead of the SFTP protocol.  Forcing the use of the SCP protocol may be necessary for servers that do not implement SFTP" for -O17:29
fungiyeah, mine says that too17:30
fungiand then says "This mode is the default."17:30
fungimaybe it's on by default on debian but not on other distros?17:30
clarkbmine says it is defalt too on tumbleweed17:30
clarkbbut ya maybe centos changed that17:30
jrosser_oh, in the HISTORY section, "Since OpenSSH 8.8 (8.7 in Red Hat/Fedora builds), scp has use the SFTP protocol for transfers by default."17:31
jrosser_that'll be it17:31
fungigot it17:32
clarkbits annoying thatthey keep deciding to change defaults ahead of upstream17:32
fungithen yeah, for now we can stem the bleeding by adding -O in git-review and talking to gerrit/mina-sshd about sftp protocol support i guess17:32
clarkbfungi: I think we can fetch it via https instead/too but that might get weird if a .gitreview has ssh settings17:32
clarkbAnother option would be to vendor the hook17:33
fungimight be nice to also get frickler's fix for parsing signed commits in git log merged while we're at it17:33
fungibut yeah, we've previously talked about vendoring a copy of the commit hook. i suppose we could make it try to fetch it anyway but treat an error there as not being a failure (just log a warning about it maybe) and then fall back on the vendored copy17:34
clarkbwow one-line doesn't mean one line amazing17:34
clarkbfungi: ++17:35
fungiyes, that one's on the git devs, i'm afraid ;)17:35
jrosser_i can make a patch for this, i think i've made it work17:39
opendevreviewJonathan Rosser proposed opendev/git-review master: Force use of scp rather than sftp when installing commit hook  https://review.opendev.org/c/opendev/git-review/+/82341317:44
fungitests should hopefully tell us if -O hasn't been around long enough17:45
*** rlandy|ruck is now known as rlandy|ruck|lunch17:46
*** cloudnull1 is now known as cloudnull17:50
clarkbis that why frickler's fix doesn't pass?17:58
fricklerclarkb: yes, git on xenial is too old, will need to add some version check I guess17:59
clarkbwe might be able to drop xenial at this point now that more things hvae updated. Would need to double check where we are still using it though18:01
jrosser_looks like some version checking might be needed to use -O18:13
jrosser_it's not there on my mac which is latest OSX18:13
*** rlandy|ruck|lunch is now known as rlandy|ruck18:14
fungieither version checking or try/except fallback18:16
fungithe matrix of possibilities will get even weirder once openssh drops scp -O (or the scp command for that matter), as well as once gerrit/mina-sshd add sftp protocol support18:17
opendevreviewJonathan Rosser proposed opendev/base-jobs master: Add nodeset for centos-9-stream  https://review.opendev.org/c/opendev/base-jobs/+/82342218:35
fungiclarkb: i can't recall, were we planning to meet this week?18:49
Clark[m]We weren't. It was last week that we said we'd play by ear but cancelled today18:51
fungiahh, cool18:59
fungii think openstack is hoping to get the skyline repos renamed into their namespace sometime soon, so revisiting renames at next week's meeting would likely be appreciated19:00
jrosser_either of 821650 or 823422 adding a centos-9-stream nodeset would be cool if possible19:15
fungiahh, thanks for the reminder!19:18
jrosser_fungi: i think thats stacked on top of this as well https://review.opendev.org/c/opendev/base-jobs/+/82164919:39
fungioh, so it was. i thought i'd already approved that one weeks ago, but apparently not19:40
opendevreviewMerged opendev/base-jobs master: Update Fedora latest nodeset to 35  https://review.opendev.org/c/opendev/base-jobs/+/82164919:48
opendevreviewMerged opendev/base-jobs master: Add 8-stream-arm64 and 9-stream nodesets  https://review.opendev.org/c/opendev/base-jobs/+/82165019:49
fungijrosser_: ^ should be immediately available for use19:52
*** dviroel|rover is now known as dviroel|rover|afk20:25
*** tosky_ is now known as tosky20:32
*** dviroel|rover|afk is now known as dviroel|rover21:46
*** dviroel|rover is now known as dviroel|out21:47
fungiinfra-root: it was brought up in a thread on openstack-discuss that the "tags" tab in gitea seems to only be populated with tags which were present in each repo at the time the database was created, but any subsequently pushed in via gerrit mirroring are not reflected. was this a known issue i'd somehow forgotten, or did gitea switch how they're generating the tags view at some point recently?21:58
Clark[m]It's been mentioned before but I don't think anyone has had time to debug it beyond "we really prefer you not rely on GitHub/gitea releases or tag tarballs23:47

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!