| *** elodilles_pto is now known as elodilles | 05:51 | |
| frickler | most of the infra-prod stuff finally worked fine tonight, I'm checking the meetpad log now https://zuul.opendev.org/t/openstack/buildset/058cef6980624f6899ee7855d78e60e2 | 07:23 |
|---|---|---|
| frickler | tonyb: looks like meetpad is broken, not sure if that is the cause or the result of the playbook failure https://paste.opendev.org/show/brMSLYlVNO9K5BztRAZr/ if you have time to take a look that would be nice | 07:30 |
| tonyb | frickler: I can look in a bit. I'm currently celebrating a friend's birthday | 07:57 |
| tonyb | frickler: that looks like the podman issue with restart vs stop/start. | 07:58 |
| tonyb | doing the latter will fix it. | 07:58 |
| frickler | hmm, just doing "docker-compose up -d" gives the same error. is it safe to do "docker-compose down" first? also don't IRC while partying ;) | 08:34 |
| tonyb | yeah the containers are already nonfunctional so doing the docker-compose down is fine. | 09:18 |
| tonyb | then docker-compose up -d should work | 09:18 |
| frickler | ok, seems to be working again | 09:22 |
| opendevreview | Dong Zhang proposed zuul/zuul-jobs master: Print instance type in emit-job-header role https://review.opendev.org/c/zuul/zuul-jobs/+/925754 | 10:36 |
| fungi | openssh 9.8p1 entered debian/sid today, stops compiling dsa key support entirely (can't be turned on in non-default configuration any longer) | 14:39 |
| fungi | particularly interesting is that sshd "will now block client addresses that repeatedly fail authentication, repeatedly connect without ever completing authentication or that crash the server" | 14:45 |
| fungi | that's an interesting scope increase for the server, doing stuff that you'd usually do with e.g. fail2ban | 14:45 |
| *** ykarel is now known as ykarel|away | 15:29 | |
| fungi | tonyb: not sure if you saw the response over the weekend/early your monday, but Ramereth[m] increased our quota (thanks Ramereth[m]!!!), so should be room there to work on the mirror server replacement there now | 16:10 |
| JayF | fungi: that's super exciting tbh | 16:23 |
| fungi | JayF: the new opensshd features? i agree | 16:23 |
| JayF | absolutely | 16:24 |
| JayF | it always seemed weird that it wasn't a first-class thing | 16:24 |
| fungi | i'm looking forward to seeing how it goes on my personal servers | 16:24 |
| JayF | yeah, this is making me want to pull it down on my public-facing gentoo box that runs ssh | 16:24 |
| fungi | i haven't looked into the details yet, but knowing the openbsd/openssh devs there are almost certainly a slew of tunables for those new behaviors | 16:26 |
| JayF | oh yeah, part of why I'm excited is I trust them to do it well | 16:27 |
| JayF | 9.8 is in gentoo already too, score | 16:27 |
| JayF | upgrading to non-stable opensshd, what could go wrong /s | 16:27 |
| fungi | there's some irony in the fact that i won't have it on my openbsd machines until openbsd 7.6 releases in a couple of months | 16:28 |
| JayF | time to install openssh in a gentoo prefix on your openbsd box for maximum recursive irony | 16:28 |
| fungi | well, i mean, i could build 9.8 from -next more easily than that ;) | 16:30 |
| JayF | does obsd have something like ports from fbsd? | 16:33 |
| fungi | yes | 16:33 |
| JayF | I haven't run an openbsd machine in 20 years | 16:33 |
| fungi | there is a ports tree, but also autobuilt packages and i opt for the latter | 16:34 |
| JayF | and I'm pretty sure configuring CARP + PF on that machine was easier than it is on any modern OS today | 16:34 |
| fungi | but openssh is in the main source tree for openbsd anyway, not in ports | 16:34 |
| JayF | that's more just me showing my ignorance about how bsd arranges packages :) | 16:34 |
| fungi | yeah, typical approach for the *bsds is that the base operating system (kernel and userland) are in one giant source tree that all gets built together to make the operating system, and then anything that isn't officially part of the os may have "ports" (essentially build recipes/makefiles) and also "packages" (pre-built bundles of things from the ports tree) | 16:38 |
| JayF | I think my assumption was that sshd wouldn't be core-system level stuff | 16:40 |
| JayF | but again, I think that's linux-brain :) distribute ALL THE THINGS! | 16:40 |
| fungi | yeah, it may not be part of the core operating system in other *bsds, but in openbsd's case they're the developers of openssh | 16:43 |
| opendevreview | Jeremy Stanley proposed opendev/system-config master: Stop null-routing mail for edge-computing-owner https://review.opendev.org/c/opendev/system-config/+/925790 | 17:29 |
| opendevreview | Andy Wu proposed openstack/project-config master: Mirror cinder-nfs charms to GitHub https://review.opendev.org/c/openstack/project-config/+/925791 | 17:37 |
| tonyb | fungi: I did see that, just haven't tested it yet to confirm | 19:05 |
| tonyb | As we're skipping the meeting, I'll drop this https://review.opendev.org/q/topic:%22noble-mirror%22 and ask for reviews | 19:06 |
| fungi | thanks tonyb! | 19:12 |
| fungi | noonedeadpunk: we can catch up whenever you're available, but prior discussions about rocky mirroring involved NeilHanlon and mnasiadka. the topic hasn't come up that i can see since the end of 2023, but we've been engaged in cleaning up some older mirrored content (fedora, centos stream 8, soon ubuntu xenial) so likely either have sufficient room now or will in the near future | 19:19 |
| opendevreview | Andy Wu proposed openstack/project-config master: Mirror cinder-nfs charms to GitHub https://review.opendev.org/c/openstack/project-config/+/925791 | 19:23 |
| opendevreview | Merged openstack/project-config master: taas: Stop gating for tap-as-a-service-dashboard https://review.opendev.org/c/openstack/project-config/+/923816 | 19:38 |
| opendevreview | Merged openstack/project-config master: Mirror cinder-nfs charms to GitHub https://review.opendev.org/c/openstack/project-config/+/925791 | 19:38 |
| noonedeadpunk | I'm a bit /o\ right now with things but eventually would be interested in having rocky mirrors as well. Will catch up with NeilHanlon as well once he's back as well | 20:31 |
| noonedeadpunk | btw, fwiw there's some issue with mirrors in OVH: https://zuul.opendev.org/t/openstack/build/e74fc63cc250464d87075381e075fa7f | 20:33 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!