Wednesday, 2024-12-04

opendevreviewClark Boylan proposed opendev/system-config master: DNM holding and testing a hacky gerrit build  https://review.opendev.org/c/opendev/system-config/+/93698600:01
clarkbok theres the hacky thing assuming I got my use of patch correct. Now to hold the node and update the issue00:01
opendevreviewClark Boylan proposed opendev/system-config master: DNM holding and testing a hacky gerrit build  https://review.opendev.org/c/opendev/system-config/+/93698600:04
clarkbforgot to git add the patch file00:04
clarkbpaladox: updated00:13
paladox👍00:13
clarkbthe captcha in front of that issue tracker is serious :)00:13
clarkbbut I also noticed there was a lot of spam on the issue tracker so that is probably why00:13
fungior maybe a sign the captcha is useless for anything except annoying meat-based entities00:14
clarkbI had to do like 6 different captchas00:15
clarkbfind all the cars, now find all the busses, now find all the squares with a traffic light in them, now find all the squares with a bus in them, now find all the sqaures with a bicycle00:15
fungithat happens to me a lot. i suspect it's because i use linux and so every site assumes my ua is made-up00:15
clarkbI feel like there was one more but I can't remember what it was00:15
fungimice enjoying a pleasant meal of multi-mode fiber jacketing00:16
clarkbalso now that I know about bazelisk I appreciate how easy it makes bootstrapping a gerrit build env00:16
fungino wait, those were rats! see, to err is meat00:17
clarkbI can't believe I spent years without it00:17
clarkbthat said I do wish that bazelisk and bazel to a less extent felt less like I'm one step away from a supply chain attack00:17
fungibe the supply chain attack you want for others00:17
* fungi is full of motivational quips tonight00:18
clarkbyou do still have to install a c++ compiler and maybe make though00:18
fungiunless you use gentoo, i guess ;)00:20
fungione of my favorite things: that debian-installer can set up and install into luks-encrypted block devices out of the box; one of my least favorite things: waiting for debian-installer to write random data to the entirety of a 2tb physical device before using it for encrypted storage... sigh00:23
fungiat least i'm giving the nvme heatsink and cooling fans on this little thing a workout00:24
fungiit does say i can cancel the operation and proceed, "albeit at the expense of a slight reduction of the quality of the encryption"00:26
clarkbI was going to say do you need a faster drive or better source of entropy?00:52
clarkbI have a held node with my hacky openid patch now (at least in theory the patch is in there) I'll have to test that tomorrow though as I've got a family thing tonight00:53
opendevreviewKarolina Kula proposed openstack/diskimage-builder master: WIP: Add support for CentOS Stream 10  https://review.opendev.org/c/openstack/diskimage-builder/+/93404509:37
*** tosky_ is now known as tosky15:40
clarkbfungi: I'm going to push up a change to purge those backups from the backup server then dive into testing my openid hack in gerrit and finally retesting the gerrit 3.9 -> 3.10 upgrade with new images. I think we can still land the gitea upgrade though and keep an eye on that as we do other things if we are still up for it15:50
opendevreviewClark Boylan proposed opendev/system-config master: Purge previously retired backups on vexxhost backup server  https://review.opendev.org/c/opendev/system-config/+/93704015:55
clarkbthats the first thing. I don't think landing that is urgent but may be worth doing while everything is still paged in15:55
Ramereth[m]I wish I knew. I'm trying to get in contact with the people behind it. I'll let you know when I find out16:01
fungiRamereth[m]: thanks! not super important, more just professional curiousity16:03
clarkbdidn't take long for me to run into a type error. I guess java's type system couldn't protect me well enough. I'll respin that patch and then look at other things while that builds16:09
fungirackspace opened a ticket a few minutes ago to let us know that the host underlying our zuul-v3 trove instance had an unexpected outage16:15
opendevreviewClark Boylan proposed opendev/system-config master: DNM holding and testing a hacky gerrit build  https://review.opendev.org/c/opendev/system-config/+/93698616:15
clarkbfungi: we're not using that db anymore I don't think16:16
fungilooks like we no longer rely on trove for that, and instead have a zuul-db01 server for that since ~8 months16:17
clarkbwe can probably claen it upat this point as we're using the dedicated insance16:17
fungiyeah, that's what i'm thinking too16:17
fungicorvus: ^ opinion? (not urgent)16:17
fungii went ahead and closed the ticket16:18
clarkbfungi: https://review.opendev.org/c/opendev/system-config/+/936198 is the gitea change if you think we should still proceed with that16:19
clarkbthe changelog for 3.10.3 specifically looks very similar to the one for 3.9.8 so I suspect we're getting a consistent set of backports from 3.11/master16:19
clarkbwhich is good it means I don't have a bunch of extra stuff to evaluate before we upgrade. I just need to rerun through the actual upgrade process16:19
fungiyep, approving 936198 now16:19
corvushey ho trove (for zuul) can go16:19
fungithanks corvus!16:20
fungigood thing i haven't logged out of rackspace yet, i'll just clicky-clicky it away16:20
corvusfungi: maybe take a look to see if there are any other zuul-ish ones too16:20
fungioh, in fact, we have two. there was a zuul-v10 trove instance16:21
corvusi think at some point we had more than one as we experimented with newer instances16:21
fungiyep16:21
corvusyeah that16:21
corvusi think that can go too16:21
fungithanks, both will be zapped16:21
fungi#status log Deleted two no-longer-used Trove database instances previously storing Zuul DB reporter results16:22
opendevstatusfungi: finished logging16:24
fungimildly amusing, rackspace's e-mail service that we use for our root contact alias flagged two automated messages from the rackspace ticket system as spam/junk (not the first time i've seen it happen, but the first time it's dawned on me they're ironically misclassifying their own messages)16:24
clarkbfungi: swinging back to list bounce processing we should have the verp probes enabled now so any removals at this point are legit. But we still need to either manually reenable any that were deactivated in openstack-discuss via the ui or script something up to do that?16:29
clarkbI don't know how many there are in total nor how tedious the manual steps are. I wonder if the web ui has a select all and then you cna hit enable on them setting enabled to enabled and disabled to enabled16:30
clarkbbut I haven't logged in to check so that is probably wishful thinking16:30
fungiclarkb: already done 2 days ago: https://meetings.opendev.org/irclogs/%23opendev/%23opendev.2024-12-02.log.html#t2024-12-02T19:27:2116:35
clarkbfungi: oh cool I had completely missed that. What process did you end up using for that?16:36
fungii used the trivial client script mentioned in the mailman-users post linked just above there in discussion16:36
clarkbgotcha16:36
fungithere was a minor typo in the post, easily corrected after seeing the traceback16:36
clarkbas an expert in creating minor typos I feel I can't complain. Its cool that worked16:37
fungiwell, the usual warning about mailercode is implicit, at least to me16:38
clarkbthis softawre comes with no warranty16:40
corvusthis sysadmin comes with no warranty16:41
fungithis warranty comes with no warranty comes with no warranty comes with no...16:42
fungithe openeuler rsync hit a timeout error:16:47
fungi[generator] io timeout after 600 seconds -- exiting16:47
fungirsync error: timeout in data send/receive (code 30) at io.c(204) [generator=3.1.3]16:47
fungii'll restart it16:47
clarkbya that seems like a network timeout and restarting makes sense16:48
fungiit's resumed16:48
fungilooks like it probably died around 01:00 utc, but i didn't see the error for some reason until i entered screen's scrollback buffer viewing mode and exited that again16:51
fungiso it really only ran for 3-4 hours before it terminated16:52
fungihopefully it'll stick it out this time16:52
clarkbsuccess! my hack to the openid callback method in gerrit gets me the behavior we see with upstream gerrit and the developer any login is a good login auth type16:59
clarkband the logging I added seems to trace out what I suspected. I'll put a paste together and post it to that chagne so people can see what it does17:00
clarkbok log paste posted to https://review.opendev.org/c/opendev/system-config/+/93698617:03
clarkbpaladox: ^ fyi that may or may not be interesting to you. But I think this confirms my prior suspicion that openid makes the sign in problem worse due to this issue in the callback method17:04
clarkbI suspect a proper fix does someting more like "if (!(rdr.endsWith("/") && nextToken == "/")) { rdr.append(nextToken); }17:06
opendevreviewClark Boylan proposed opendev/system-config master: DNM holding and testing a hacky gerrit build  https://review.opendev.org/c/opendev/system-config/+/93698617:16
clarkbok I've updated to something that I can probably propose upstream. Goign to rehold and retest that though17:17
clarkbconsidering this is auth code though being cautious is probably a good idea?17:18
clarkbI don't think we should try and rush that in as part of or before the 3.10 upgrade17:18
fungiyeah17:25
clarkbI even remembered you can't use strfoo == strbar in java to test string equality (that checks reference equality iirc)17:29
fungioh, weird, like the "is" operator in python then?17:30
clarkbya17:32
clarkbwith that pretty well understood I'm going to take a break but should be back in time to watch the gitea upgrade then retest the gerrit upgrade with new images17:40
fungiyeah, i'm around, just making pizza dough for this afternoon17:40
fungiwill keep an eye on its progress17:40
BlaisePabon[m]I have been baking a lot of sourdough lately and curious about pizza dough.17:48
fungii have made sourdough pizza dough many times, but it takes a lot of skill to work it into shape because sourdough tends to be a lot more sticky than doughs levened with directly added yeast17:51
fungiit does work well for neopolitan-style crusts particularly though, really any higher-heat baking is perfect for sourdough17:52
fungii cheat by shaping the dough directly onto parchment rounds and then slip the parchment out from under the crust about 5 minutes into the bake, otherwise it's really hard to move around with a peel (dusting the work surface with flour and cornmeal only gets you so far)17:53
fungizuul thinks the gitea upgrade is 5 minutes from merging18:07
opendevreviewMerged opendev/system-config master: Upgrade gitea to 1.22.4  https://review.opendev.org/c/opendev/system-config/+/93619818:10
opendevreviewClark Boylan proposed opendev/system-config master: Update Gerrit image tag to 3.10 (from 3.9)  https://review.opendev.org/c/opendev/system-config/+/93705118:10
clarkbinfra-root ^ I've marked that WIP in preparation for the upgrade. There is https://review.opendev.org/c/opendev/system-config/+/934075 which should be safe to land now so that when we update to 3.10 we pick up those config updates for log rotation though18:11
clarkbbut reviews on both of them in preparation for the upgrade are apprecaited18:11
fungipromote completed, install is pending18:14
fungilooks like it's stuck behind an hourly set, but that's not got much longer18:15
clarkbcool I'll jump on gitea09 and prepare to check them in series as they update18:17
clarkbI should note that 934075 is not critical for the upgrade either we can always apply that later18:19
clarkbits just a minor optimization that gerrit 3.10 allows us to do. Up to us if we want to deal with that post upgrade or as part of the upgrade18:20
tonyb934075 looks good to me, I'm happy for it to land $whenever works for y'all.18:23
clarkbtonyb: I think we can approve it as soon as the gitea upgrade is ocmplete and happy (it shouldn't affect gerrit 3.9 it shoudl ignore it which our test jobs also confirm)18:24
clarkband only delaying for gitea to be done so we don't have multipel things in flight to distract us18:24
clarkbgitea09 has updated18:26
clarkbhttps://gitea09.opendev.org:3081/opendev/system-config/ seems to load for me18:26
clarkbI'll start a clone too18:26
fungiseems to be working for me18:26
fungiPowered by Gitea Version: v1.22.418:27
clarkbgit clone is of the above link is happy for me too18:27
fungii was browsing on 3000 but 3081 is also working18:27
clarkbgitea10 is done now too18:27
clarkband now 11 is done. Halfway there18:29
clarkball 6 are done now and reaching them directly I see the expected versions18:33
clarkbif the job completes successfully I think the last thing I'd like to double check is replication18:33
clarkbanyone have a change to push or a new patchset?18:34
clarkbusually we can wait for a random patchset to be pusehd too and just check that18:34
clarkbhttps://zuul.opendev.org/t/openstack/build/c93f7dfc60614f30890413f53f842f08 job was successful /me looks for something that has been pushed to check replication18:34
clarkbnothing yet18:35
opendevreviewGhanshyam proposed openstack/project-config master: Move test-release-openstack job to Noble  https://review.opendev.org/c/openstack/project-config/+/93705318:40
clarkbhttps://review.opendev.org/c/openstack/ovn-bgp-agent/+/936968 got a new patchset but also ^18:40
clarkbI'll check gmann's change since I already have that repo cloned18:40
clarkb`git fetch origin refs/changes/53/937053/1` worked for me where origin https://opendev.org/openstack/project-config (fetch)18:41
clarkbso I think this is all looking good. Anything else we want to check before moving onto the next thing?18:42
clarkbfungi: as I'm going back through https://etherpad.opendev.org/p/gerrit-upgrade-3.10 I notice there are a few steps that should happen at least an hour before the maintenance starts (items 5 and 6 in the list). Any chance you'd be willing to get those out of the way since it will be slightly less early in the morning for you then?18:46
clarkb#5 is a new one in reaction to feedback from the last upgrade18:48
clarkbpeople awnt to be reminded with ~enough time to quickly finish what they are doing in gerrit before it goes down and an hour is probably a reasonable amount of time for that18:48
fungiclarkb: sure, i'll set myself a reminder and take care of those bits, no problem18:51
clarkbthanks!18:53
fungii'll do the emergency file additions a couple of hours ahead just to be on the safe side18:57
clarkbsounds good19:01
clarkbsince gitea seems happy should we +A https://review.opendev.org/c/opendev/system-config/+/934075 as mentioned above?19:01
clarkbif we do +A that I'll incorporate it into the manual upgrade pass I'm about to do19:03
clarkbotherwise if we want to do it post upgrade it can wait19:03
fungii've approved it19:05
fungiit's fairly innocuous, no point in putting it off to after19:06
clarkbthanks I'm updating the held test node now then will run through an upgrade and a downgrade19:21
clarkbok I've upgraded a gerrit 3.9.8 with the log rotation config in place on the held node noted in the etherpad up to a 3.10.3 gerrit and then downgraded back to a 3.9.8 to test the entire up and down process19:42
clarkbas expected nothing really changed process wise. I did update the etherpad with new log outputs and versions and so on but the process itself was unmodified and the outputs don't change other than versions and timestamps really19:43
clarkbat this point I think I've gone over most stuff short of really exercising the gerrit versions but our ci jobs do that pretty well already19:43
clarkb(things like make a change post a comment etc are all covered in ci)19:44
clarkbif you have time to look over https://etherpad.opendev.org/p/gerrit-upgrade-3.10 for anything obviously wrong that might be the onl remaining task19:44
clarkbnow to do the review on docker image mirroring role I promised19:45
clarkbI might have time to retset the openid change after lunch and propose that upstream if it still looks good after my edits19:50
*** elodilles is now known as elodilles_pto19:54
opendevreviewMerged opendev/system-config master: Configure native Gerrit log rotation and cleanup  https://review.opendev.org/c/opendev/system-config/+/93407520:08
clarkbthat ^ appears to haev deployed successfully. And now to go back to finishing lunch20:32
clarkbI have tested my lastest hacked up patch for openid on a held node it is seems to work for both an initial login with the registration pane and a normal login of an existing user. So now I just need to figure out how to run gerrit's java formatter check and I'll push that upstream21:20
clarkbyou grab this jar https://github.com/google/google-java-format/releases/download/v1.24.0/google-java-format-1.24.0-all-deps.jar and run it against the files21:24
clarkboh actually I just realized I need to also check the case where redirect back to the start point works21:32
clarkbI'll do that before pushing21:32
clarkbyup that still works phew21:34
clarkbhttps://gerrit-review.googlesource.com/c/gerrit/+/44504121:37
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Protect hostvars iterations from implicit localhost  https://review.opendev.org/c/zuul/zuul-jobs/+/93707121:59
fungiopeneuler mirror pull is still in progress, currently at 50% quota for the volume22:39
opendevreviewMerged openstack/project-config master: Move test-release-openstack job to Noble  https://review.opendev.org/c/openstack/project-config/+/93705322:56
clarkbcoming in gerrit 3.11: "Submitting changes with unresolved comments is blocked for new sites by default" I'm glad they don't just switch that for everyone I think we'd have a revolt on our hands if they did22:57
JayFThat's a bold change :\ 23:00
opendevreviewMerged zuul/zuul-jobs master: Protect hostvars iterations from implicit localhost  https://review.opendev.org/c/zuul/zuul-jobs/+/93707123:02
mordredyeah. E_DONOTWANT23:04

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!