| *** liuxie is now known as liushy | 02:56 | |
| frickler | 2024-05-17 05:03:49 | reprepro completed successfully, running vos release. | 06:07 |
|---|---|---|
| frickler | mirror.ubuntu using 969G out of the 1200G, so seems like an easy fit. | 06:08 |
| frickler | hmm, seems we bumped the openeuler quota from 300G to 350G beginning of march and it did hit that limit 3 weeks later again | 06:11 |
| opendevreview | Merged openstack/project-config master: Retire Senlin: remove project from infra https://review.opendev.org/c/openstack/project-config/+/919355 | 09:14 |
| opendevreview | Merged openstack/project-config master: Retire ec2-api: remove project from infra https://review.opendev.org/c/openstack/project-config/+/919397 | 09:14 |
| opendevreview | Merged openstack/project-config master: Retire Sahara: remove project from infra https://review.opendev.org/c/openstack/project-config/+/919391 | 09:29 |
| *** mordred1 is now known as Guest6802 | 10:59 | |
| fungi | yeah, i'm rerunning the ubuntu reprepro just to make sure it completes normally again before i release the flock | 11:43 |
| opendevreview | Merged openstack/project-config master: enforce BackportCandidate voting for kolla https://review.opendev.org/c/openstack/project-config/+/910212 | 11:59 |
| fungi | the re-run also completed cleanly, so i've dropped the flock now and closed out that screen session | 14:36 |
| fungi | guess we can work on noble arm64 next | 14:37 |
| tonyb | fungi: nice. | 15:33 |
| tonyb | I'm looking at mediawiki I'm a bit confused about the interactions between EXPOOSE (in Dockerfile) and 'network_mode: host' in the docker-compose file. | 15:37 |
| tonyb | It may be that the official container image isn't workable for us. The official container runs apache-foreground and EXPOSEs 80/tcp. I think that means that external clients will be able to connect directly into the apache in that container. what I think we want is for client sockets to terminate on the actual host so we can manage redirects and ultimately SSL. and then ProxyPass into the container | 15:40 |
| fungi | tonyb: yeah, i guess they need something running the php scripts in the container, so are relying on apache mod_php instead of something like fastcgi? | 15:42 |
| fungi | we could probably leave the container apache listening on plain http on the loopback and then run our own outer apache proxying to it | 15:42 |
| tonyb | fungi: Do we have an example of docker/docker-compose forcing the EXPOSE/bind to localhost rather than all interfaces | 15:46 |
| fungi | i have no idea, i'd just end up git grepping for it in system-config | 15:46 |
| tonyb | fungi: I can do that .... if I had any idea what to grep for ;P | 15:47 |
| tonyb | Hmm perhaps expose defaults to localhost | 15:50 |
| fungi | sounds like a reasonable guess. also you can just guess, throw spaghetti at the wall^W^Wzuul, and see what sticks | 15:50 |
| fungi | pip 24.1b1 is out for evaluation. notably, it drops python 3.7 support, and also support for non-compliant version numbers/dependency specifiers. seems like either of these could impact some of our projects when 2.1 final lands so might be worth looking into if anyone has time | 16:07 |
| fungi | er, when 24.1 final lands, i mean | 16:11 |
| tonyb | I figured ;P | 16:11 |
| tonyb | I hope to have something ready for zuul etc later today. | 16:12 |
| fungi | oh cool! | 16:12 |
| tonyb | I have a "reaonsably neat" local testing setup | 16:12 |
| tonyb | where I create a VM (in libvirt with usermode networking) and then configure ansible to use system-config roles/plays etc | 16:13 |
| tonyb | Nope, EXPOSE bound to :::80 | 16:15 |
| fungi | pretty sure that will be listening on [::1]:80 as well then, so we could just make sure it's blocked by iptables if it's too hard to change the listening address | 16:18 |
| tonyb | More research needed | 16:36 |
| opendevreview | Jeremy Stanley proposed opendev/system-config master: Add ubuntu noble arm64 to our package mirrors https://review.opendev.org/c/opendev/system-config/+/919973 | 16:47 |
| fungi | infra-root: ^ i can babysit that today/tomorrow if we're ready to move forward with it | 16:47 |
| opendevreview | Merged openstack/project-config master: Adjust max Code-Review possible on governance repo https://review.opendev.org/c/openstack/project-config/+/918146 | 19:28 |
| tonyb | Well I have a container running in a vm which looks *somewhat* like mediawiki. It currently fails trying to access the database | 21:59 |
| tonyb | I need to figure out the best way to fake a database with some data. | 21:59 |
| tonyb | I do have a mariadb container running in the same VM so I s'pose I could try setting up a fresh install | 22:01 |
| fungi | any way to force it to use host networking? usually our struggles are when containers make up their own separate networks that need to be routed by docker | 23:14 |
| tonyb | it seems to be somewhat working now. Still plenty to faff with. We may need to build custom container as the number of hacks is getting large. | 23:25 |
| tonyb | stuff for next week | 23:25 |
| apevec | looks like wiki.o.o is not much used, mostly for meeting agendas https://wiki.openstack.org/wiki/Special:RecentChanges | 23:51 |
| apevec | maybe at one point we could just create R/O archive like CentOS project did https://wiki.centos.org/ | 23:52 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!