Tuesday, 2025-02-04

clarkbnew grafana is the next job (currently running against gitea-lb)00:01
opendevreviewClark Boylan proposed opendev/zone-opendev.org master: Switch grafana cname to grafana02  https://review.opendev.org/c/opendev/zone-opendev.org/+/94066800:07
clarkbinfra-root ^ the new service is up and seems to work you can check it https://grafana02.opendev.org I think we can update the cname record now00:07
clarkbworking on getting the meeting agenda out now00:08
ianwshould i ask about why all the panels now say they require angular which is deprecated?00:09
clarkbyes! but I don't know the answer yet. I figured that would be a next problem to solve00:10
clarkbhttps://grafana.com/docs/grafana/latest/developers/angular_deprecation/00:11
ianwheh i just felt a bit triggered that it's going to require changes in grafyaml00:11
clarkbianw: my suspicion is that the graphite datasource relies on angular in grafana 10 which is where they deprecated it. Then I'm hoping once we get 11 going they will have updated the graphite source to not use angular anymore00:12
clarkbbut I didn't want to dig into that until we started testing 1100:12
ianwhrm it seems more like the panel type than the data source?00:12
clarkbthat post says its both00:13
clarkbbut ya could also be the panels have migrated too. We aren't using any custom plugins or addons so I'm hoping that 11 just does the swap for us00:13
ianwhttps://grafana.com/docs/grafana/latest/developers/angular_deprecation/angular-plugins/#automatic-migration-of-plugins ... that does make it feel like a grafyaml issue :/00:13
ianwyeah i guess the problem is that grafana may rewrite your dashboard for you, but if we keep loading it with old panels from grafana that probably breaks00:14
clarkbhrm ya though I guess we just have to remap things?00:14
clarkbprobably the easiest thing is to deploy with 11 see how it automatically updates things then update grafyaml to write that target in the first place00:15
clarkband in theory that works with 10 and we can switchover before upgrading00:15
ianw++00:15
ianwwe can also move to loading the pages from exported js directly - so make the updated panel and save the js, then load that, rather than go through grafana.  it just seems like there's really not much community interest in declarative language for dashboards, you're just expected to edit via ui00:16
ianws/through grafana/through grafyaml/00:16
clarkb10 still has support so my immediate goal was updating to latest 10 and the OS update then figuring it out from there00:18
clarkbheh and in the time I started looking at this there is a new 10.4 release00:19
ianwheh, another day, another js framework ... hi ho hi ho, it's off to refactoring we go ...00:20
clarkbannoyingly release-10.4.15 doesn't have changelog entries for that release00:23
clarkbnow to figureout where github permalinking went00:23
opendevreviewClark Boylan proposed opendev/system-config master: Update to the even more recent grafana 10.4.15  https://review.opendev.org/c/opendev/system-config/+/94066900:24
clarkbthey don't seem to have a :10 tag on docker hub so we hvae to update to pinned versions like this for now00:24
*** diablo_rojo_phone is now known as Guest796400:30
ianwi remember we used to pull :latest and that broke things https://github.com/grafana/grafana/discussions/47177#discussioncomment-3362402 ... i'm not sure where the discussion on stable releases ever ended up01:34
karolinku[m]Hey, I'm planning to work on adding support for keyfiles in Glean project (https://issues.redhat.com/browse/RDO-443). It is related to support for Centos 10 release. Is that OK for you to add such feature? maybe TheJulia ianw will know09:38
tonybkarolinku[m]: please do!10:53
fungikarolinku[m]: to be clear, it would be glean writing the new networkmanager config format to files in /etc/NetworkManager/system-connections/ at boot, in situations where interface autoconfiguration (dhcp/slaac) is not sufficient?12:52
fungithat seems reasonable, as long as it can be generally applicable to other distros that may start using newer nm at some point12:53
fungithough i'm surprised centos isn't using systemd-networkd12:53
fricklerI also wonder whether we really need to keep using glean for that, or whether cloud-init might not be mature enough by now. seems like a good idea to leave updating things to others12:54
fungifrickler: the cloud-init problem was never maturity, it was the fact that it pollutes te images with a ton of otherwise unnecessary python libraries12:56
* fungi checks the situation there...12:57
fungii count 10 first-order python3-* libs in the dependencies for the current version in noble, not sure how large the transitive set is: https://packages.ubuntu.com/noble-updates/cloud-init12:58
fungigranted, if we can get devstack and openstack functional tests to always use venvs (without --system-site-packages) for everything, it my be less of a problem than it was previously13:00
fungithe "minimal" nature of glean is that it has 0 runtime python dependencies outside the stdlib13:01
fricklerah, so same issue that cirros has13:02
karolinku[m]in fact I'm not expert to decide whether Glean should be developed further or it should be replaced by other solution, so I started discussion:) as tonyb helped find out, is that Gean's lack of keyfiles support caused problem with booting C10. 13:02
opendevreviewKarolina Kula proposed openstack/diskimage-builder master: WIP: Add support for CentOS Stream 10  https://review.opendev.org/c/openstack/diskimage-builder/+/93404513:11
fungifrickler: i don't know about cirros's problems to say whether this is similar. to be clear it's not a matter of image size, it's that images with cloud-init installed may then come with versions of various python libraries that conflict with other versions of the same libraries some jobs may want to install13:17
fungiout of curiosity, i did a dry-run installing cloud-init on one of my netbooks just now and it was going to pull in 21 different python libraries (at least several of which are in openstack's constraints list). this netbook is far from having a minimal package set installed, so i don't know how many more it might mean on test nodes13:21
fungibut like i say, if all our python jobs have improved to the point that they're thoroughly insulated from the system-wide module search paths, it might no longer be a real concern13:24
fricklerfor cirros the initial issue was having to start including python at all, which would already almost double the image size. anyway, let's not further delve into this then, at least I won't currently13:29
fricklerthe other thing to look at however would be whether centos 10 cloud images actually need to use networkmanager, or if systemd-networkd or similar would be options more suited for a cloud environment. nm to me is a desktop tool ... but I also might just be oblivious to modern developments13:30
fungiyeah, that's the position debian's taking: systemd-networkd for cloud guests and servers, network-manager for portable devices and desktops13:31
fungiat least that seemed to be the consensus the last time the discussion came up there13:33
jrosserfwiw one of the first things that osa jobs do on centos/rocky is get systemd_netword installed13:33
jrosserthen everything is identical on all OS from that point on13:33
jrosserbut it does come from EPEL, and is as such not a stock part of the distro13:34
fungiwell that was exciting... i lost all contact with rackspace flex sjc3 for about 15 minutes14:03
*** ykarel_ is now known as ykarel14:28
fungii've rechecked bindep change 940258 for new results, now that pbr 6.1.1 is on pypi the previously failing jobs should pass15:00
fungiworked!!!15:22
fungii'll refresh that stack now to simplify the first change, and drop the dnm one for now15:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Use PBR's pyproject.toml build-backend support  https://review.opendev.org/c/opendev/bindep/+/81674115:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Evacuate most metadata out of setup.cfg  https://review.opendev.org/c/opendev/bindep/+/93852015:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Drop support for Python 3.6  https://review.opendev.org/c/opendev/bindep/+/93856815:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Drop requirements.txt  https://review.opendev.org/c/opendev/bindep/+/93857015:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Drop tox.ini  https://review.opendev.org/c/opendev/bindep/+/94021915:22
opendevreviewJeremy Stanley proposed opendev/bindep master: Drop auxiliary requirements files  https://review.opendev.org/c/opendev/bindep/+/94071115:32
fungianother likely contentious change ^15:32
corvusfungi: i feel like that could use some more explanation -- because that's a lot of near-duplication, and i don't get from the commit message why we would want to do that (not that i object, i just don't understand, and therefore, can't attempt to make a suggestion to reduce duplication)15:34
fungicorvus: fair, also we could probably define a list in noxfile.py and reuse it throughout15:35
corvusyep, that's possible, and if there's like one thing that needs to be changed, then we can perform surgery on one item in the list, for example15:35
corvus(but right now, the change would look like test_requirements == open('test-requirements.txt').read() and i don't know why that's better yet)15:36
fungii'm not sold on a number of changes in that stack, but insofar as a demonstration of what other projects outside our direct sphere are doing with python packaging also works with pbr, i'm putting together a menu of changes we could chose to do or leave out to form a modernized standard for our own packages15:36
clarkbya centos is all in on network manager15:41
clarkband they dropped the old sysconfig support in 10 apparently15:41
clarkbI agree adding support for the configuration that network manager does want is reasonable in glean15:41
clarkbwe don't have any plans to replace glean on our systems at least. It is possible that cloud init would work on all clouds with all platforms we support today but then we'd still be open to it taking actions we don't want (like formatting volumes and mounting them based on metadata contents iirc)15:42
opendevreviewJeremy Stanley proposed opendev/bindep master: Drop auxiliary requirements files  https://review.opendev.org/c/opendev/bindep/+/94071115:44
fungicorvus: ^ there's the dry form15:44
fungialso makes it a little clearer that we can, e.g., not install coverage in normal test jobs and only in the coverage job15:45
clarkbre bindep I think the goal I have in mind is to illustrate how pbr consuming projects can look like modern python package projects too.15:45
clarkbthis requirements and noxfile stuff seems a bit orthogonal (its another illustrative cleanup but not directly related to pbr, pyproject.toml and setuptools)15:46
fungiwell, the requirements.txt removal shows putting the install_requires into pyproject.toml (the python packaging community seems to regard requirements.txt as an old, pip-only wart)15:47
clarkbhttps://packaging.python.org/en/latest/discussions/install-requires-vs-requirements/ it seems more nuanced than that15:48
fungiif we have pbr populate the install_requires from requirements.txt then we have "dynamic dependencies" from the perspective of python packaging people, which seems to be a huge pain point because they want dependencies to be a declarative thing that can be extracted and served as part of the pypi api, for example15:48
clarkbbasically requirements files are specific and package install_requires are not15:48
clarkbbut still having nox pip install a test-requirements.txt file is orthogonal to all this aiui15:49
fungiagreed, that was moer of a "if we're remocing requirements.txt, should we also remove test-requirements/txt for consistency?"15:49
clarkband fit the description in the document above for building specific environments (in this case to execute some sort of test or other)15:49
clarkbfwiw I'm not opposed to the change I just wanted to decouple it from the pyproject efforst since I don't think they are super related 9other than I guess that dropping requirements.txt is part of the pacakge refactor)15:50
fungiyeah, i also tried to sort that stuff toward the end15:54
fungiarranged somewhat in order from most relevant and least contentious to least relevant and most contentious15:54
clarkbinfra-root if we can land https://review.opendev.org/c/opendev/system-config/+/940669 then check that grafana02 is still happy then we can land https://review.opendev.org/c/opendev/zone-opendev.org/+/940668 and start grafana01 cleanups15:56
clarkbshould be safe to proceed with the first change since grafana01 is still serving content until the second change to update dns lands15:56
clarkbI've approved the 10.4.15 bump and will approve the cname update once that deploys and looks happy16:44
opendevreviewMerged opendev/system-config master: Update to the even more recent grafana 10.4.15  https://review.opendev.org/c/opendev/system-config/+/94066917:19
opendevreviewMerged opendev/zone-opendev.org master: Switch grafana cname to grafana02  https://review.opendev.org/c/opendev/zone-opendev.org/+/94066817:53
clarkbthe dns record is pointing me at the new server now re ^18:07
fungisame18:08
funginodepool dashboard lgtm still, aside from the angular warning18:08
*** iurygregory_ is now known as iurygregory18:55
melwittjust fyi I have noticed odd (automated I assume) comments by this user recently https://review.opendev.org/dashboard/37702 for some reason when I try to search commentby: it doesn't bring up any results20:44
Clark[m]melwitt: we noticed too and I believe fungi disabled the account due to their spam. Disabling the account likely broke search for it20:53
melwittah ok cool20:55
corvusoh shoot, i wanted to highlight https://review.opendev.org/940547 the jeepyb zuul.yaml change in the meeting21:04
corvusi feel like that's ready to either move forward or abandon21:04
corvusdo we think that's sufficiently socialized, or should i put it on the agenda for next week?21:05
tonybooops I missed the meeting because TZs are hard :(21:07
Clark[m]corvus I think it's fine. The main thing is it will rebuild our Gerrit image so we may want to restart to avoid surprises..however the Gerrit image isn't necessary for your change maybe we want to stop jeepyb from doing that and instead manually trigger rebuilds when we know we make a change that does 21:20
Clark[m]Though now that I've said that I wonder if we run jeepyb out of the image for manage projects. I don't think we do21:25
fungimelwitt: https://review.opendev.org/q/commentby:37702 still brings up anything they commented on, but because they're disabled (as of ~1700 utc yesterday) any of their other ids are now invalid21:28
fungiwe also observed launchpad bugs they fiddled with, github pull requests they opened, et cetera21:29
JayFthis looks almost like really bad pen testing 21:29
fungiso they may still continue messing with stuff, but they were also fiddling with aws, npm, and similar orgs elsewhere21:29
JayFoh wait, I know this21:29
JayFhoold on a sec I have a spicy addition I think21:29
fungiat one point they asked eclipse foundation to add a project namespace for them too, but then ghosted21:30
fungimaybe ai training related21:30
melwittfungi: oh interesting. I was trying to search using the email rather than the user id. good to know21:30
JayFnope, https://github.com/pypa/packaging-problems/issues/872 is what I was thinking of, but the names/account ids don't match21:30
fungithey seem to have some ai-oriented projects in their github org that don't look like direct forks of stuff on github, at least21:31
fungiJayF: ooh, that's an exciting case21:32
JayFironic-secureboot-driver does exist, btw, github.com/yahoo/ironic-secureboot-driver and is already in pypi21:33
JayFwhich is whole bucket of unfortunate all it's own21:33
* JayF dislikes anytime there's an openstack-* or ironic-* that isn't capital-O-OpenStack21:33
JayFhttps://github.com/openstack-exporter/openstack-exporter being a recent painful example (it's not well maintained and patches don't merge there, but it says openstack on it :C) 21:34
fungilooks like it's not in pypi under the exact name ironic-secureboot-driver at least21:35
fungimaybe it was deleted from pypi at some point, but yeah definitely looks like an attempt to exploit references to names for defunct projects21:36
JayFI got that link from someone almost certainly empowered to act on it accordingly, fwiw21:36
JayFbut I saw the ironic-* and it raised an eyebrow21:37
fungias one does21:38
Clark[m]Discord is apparently having a large outage if anyone else is using it for things21:44
corvusi would not have known if you didn't mention it21:50
Clark[m]I guess it was fixed by the time I posted about it21:52
corvuswell, i just meant i'm not using it for things :)21:52
opendevreviewClark Boylan proposed opendev/system-config master: Remove grafana01 from config management  https://review.opendev.org/c/opendev/system-config/+/94075222:45
opendevreviewClark Boylan proposed opendev/zone-opendev.org master: Cleanup grafana01 DNS records  https://review.opendev.org/c/opendev/zone-opendev.org/+/94075322:47
clarkbthe promised grafana01 cleanup changes for when we're happy with grafana0222:47
clarkboh keycloak was the third mariadb update. I suspect we can do that one whenever as well since keycloak use is currently minimal22:48
corvus++23:22

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!