Friday, 2025-03-21

opendevreviewAlbin Vass proposed zuul/zuul-jobs master: Revert "Revert "tox: update lint regex to not require column""  https://review.opendev.org/c/zuul/zuul-jobs/+/72891207:04
opendevreviewJeremy Stanley proposed opendev/engagement master: Ratchet down and simplify linting rules  https://review.opendev.org/c/opendev/engagement/+/94521213:32
opendevreviewJeremy Stanley proposed opendev/engagement master: Update project boilerplate  https://review.opendev.org/c/opendev/engagement/+/94515114:21
opendevreviewJeremy Stanley proposed opendev/engagement master: Import old who-approves.py script  https://review.opendev.org/c/opendev/engagement/+/94515214:21
opendevreviewJeremy Stanley proposed opendev/engagement master: Ratchet down and simplify linting rules  https://review.opendev.org/c/opendev/engagement/+/94521214:21
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Add upload-image-s3 role  https://review.opendev.org/c/zuul/zuul-jobs/+/94481314:51
opendevreviewJeremy Stanley proposed opendev/engagement master: Rename who-approves.py to maintainers.py  https://review.opendev.org/c/opendev/engagement/+/94522414:55
opendevreviewJeremy Stanley proposed opendev/engagement master: Add a convenience entrypoint for maintainers.py  https://review.opendev.org/c/opendev/engagement/+/94522514:55
clarkbinfra-root I've just looked at nodepool dib-image-list records and everything still looks good for cleaning up the old servers. I am going to proceed with that now14:55
fungiperfect, thanks!14:56
clarkb#status log Deleted nb04.opendev.org (8cdc7729-1a51-4c7b-9841-fb03f7873f9e) and its associated volume (abd54a83-b31d-4400-b6bd-6a64409726cd). nb07 has replaced it.15:01
opendevstatusclarkb: finished logging15:01
clarkbthe volume is actually still in a deleting state. I'll have to check on that later and followup with osuosl if it doesn't go away15:01
clarkbnow to do the x86 builders15:01
clarkb#status log Deleted nb01.opendev.org (cd068bef-5da1-4d43-b9c6-6e55b5000ed7) and its associated volumes (0ba0c1b7-f2df-42dd-a3a3-ac42585c5cb8, 07683dcc-8139-4d53-93cf-cb2e90cb1ac8). nb05 has replaced it.15:06
opendevstatusclarkb: finished logging15:06
opendevreviewJames E. Blair proposed zuul/zuul-jobs master: Add upload-image-s3 role  https://review.opendev.org/c/zuul/zuul-jobs/+/94481315:06
clarkb#status log Deleted nb02.opendev.org (f5b26d10-260e-4479-b639-42d4fff81ffb) and its associated volumes (219a3cf2-6c07-4625-b926-87bb4411d397, 0ed5b6f5-9db0-4d1f-81b0-e771177e9992). nb06 has replaced it.15:10
opendevstatusclarkb: finished logging15:10
clarkbthe arm64 builder volume eventually deleted on the cloud side too so I think thats all good15:10
clarkbnext I'm going to boot a new arm64 mirror and get that ball rolling15:11
clarkbthat is in progress. When the boot is complete I'll attach the volume and configure it and push some changes up to have ansible deploy it15:20
opendevreviewClark Boylan proposed opendev/zone-opendev.org master: Add new mirror in osuosl  https://review.opendev.org/c/opendev/zone-opendev.org/+/94523015:51
opendevreviewClark Boylan proposed opendev/system-config master: Add new mirror in osuosl  https://review.opendev.org/c/opendev/system-config/+/94523115:56
clarkbok those two changes should do it. The new server is up and running with the volume attached, formatted, and mounted to the two different cache paths15:56
clarkbfeel free to ssh in and take a look and dbouel check15:57
clarkbnow that nb01, nb02, and nb04 are not in our inventory and have been deleted I will clean up the emergency file on bridge15:59
clarkbfungi: do we want to try deploying the new arm64 mirror in osuosl? https://review.opendev.org/c/opendev/zone-opendev.org/+/945230 then https://review.opendev.org/c/opendev/system-config/+/945231 could use reviews if so17:44
fungiyeah, lemme wrap up what i'm in the middle of and i can take a look in a few minutes17:46
clarkbthanks17:46
clarkbI'm going to start working on that newsletter draft now17:47
clarkbfungi: I assume that verify your keys email is in response to you generating new keys/17:50
fungiyeah, just finished validating it and moved those messages to the openpgp inbox folder17:50
fungiworking on exporting the signing subkey now17:51
clarkback17:51
clarkbok draft is in place at https://etherpad.opendev.org/p/opendev_newsletter18:06
opendevreviewMerged opendev/zone-opendev.org master: Add new mirror in osuosl  https://review.opendev.org/c/opendev/zone-opendev.org/+/94523018:20
opendevreviewJeremy Stanley proposed openstack/project-config master: Replace 2025.1/Epoxy key with 2025.2/Flamingo  https://review.opendev.org/c/openstack/project-config/+/94524718:50
opendevreviewMerged opendev/system-config master: Add new mirror in osuosl  https://review.opendev.org/c/opendev/system-config/+/94523119:16
clarkbI'll check that as soon as the mirror job is done. Hopefully we can swap over DNS today too19:18
clarkbalmost there. I just remembered we'll have to compile openafs though and on arm that may take a while so don't be in a hurry19:41
clarkbhttps://mirror02.regionone.osuosl.opendev.org/ is serving content now19:54
opendevreviewClark Boylan proposed opendev/zone-opendev.org master: Flip osuosl mirror over to the new noble node  https://review.opendev.org/c/opendev/zone-opendev.org/+/94525419:55
opendevreviewClark Boylan proposed opendev/system-config master: Cleanup old osuosl mirror  https://review.opendev.org/c/opendev/system-config/+/94525619:59
opendevreviewClark Boylan proposed opendev/zone-opendev.org master: Cleanup old arm64 mirrors  https://review.opendev.org/c/opendev/zone-opendev.org/+/94525719:59
clarkbthat series of changes switches us to the new mirror, removes the old mirror from the inventory, then removes the old mirror and a couple others I saw taht can go away from dns20:00
fungiall 3 lgtm20:42
clarkbI'll start approving them in sequence20:44
opendevreviewMerged opendev/zone-opendev.org master: Flip osuosl mirror over to the new noble node  https://review.opendev.org/c/opendev/zone-opendev.org/+/94525420:45
fungithanks, i mainly just didn't want to approve them if you weren't ready to check behind them as they deploy20:48
clarkbya no problem. I should be around. Maybe even with enough time to delete the old server. We'll see20:50
clarkb`dig mirror.regionone.osuosl.opendev.org` shows me the new record already so I'll proceed with the inventory cleanup20:50
clarkbits still ni check but I'ev approved it anyway20:51
opendevreviewMerged opendev/system-config master: Cleanup old osuosl mirror  https://review.opendev.org/c/opendev/system-config/+/94525621:27
clarkbI'm approving the dns cleanup now21:38
opendevreviewMerged opendev/zone-opendev.org master: Cleanup old arm64 mirrors  https://review.opendev.org/c/opendev/zone-opendev.org/+/94525721:41
clarkbthat is queued up behind the deployment for 945256. Once dns is cleaned up I'll delete the server21:42
opendevreviewJeremy Stanley proposed opendev/engagement master: Ratchet down and simplify linting rules  https://review.opendev.org/c/opendev/engagement/+/94521222:16
opendevreviewJeremy Stanley proposed opendev/engagement master: Rename who-approves.py to maintainers.py  https://review.opendev.org/c/opendev/engagement/+/94522422:16
opendevreviewJeremy Stanley proposed opendev/engagement master: Add a convenience entrypoint for maintainers.py  https://review.opendev.org/c/opendev/engagement/+/94522522:16
opendevreviewJeremy Stanley proposed opendev/engagement master: Rewrite maintainers.py functionality  https://review.opendev.org/c/opendev/engagement/+/94526222:16
clarkbdigging against the nameservers doesn't resolve mirror01 anymore. I'm going to delete it and its volume now22:16
clarkb#status log Deleted mirror01.regionone.osuosl (f0f1ed9d-98a8-4713-8d74-69b168c4c996) and its volume (5abcb319-1b3a-4d3c-9dba-532899554da1). mirror02.regionone.osuosl has replaced it.22:19
opendevstatusclarkb: finished logging22:20
clarkbglad I was able to get that done and minimize the amount of time we were using twice the resources22:21
clarkbthis is related to debugging zuul unittests but bringing it up here bceause it is a bigger question around our sudo removal. I'm running a bunch of zuul unittests on a throwaway change to gather data on some mariadb failures. normally zuul uses mysql and its fine. I have realized I can't journalctl -u mariadb > logfile in the job post-run playbook beacuse we've revoked sudo access at22:23
clarkbthat point22:23
clarkbany one have good idaes for working around that? maybe the best thing is to drop the revoke sudo in the throwaway change? Or maybe journalctl has some group membership I can add before dropping sudo to see logs later?22:23
fungiwe could add a sudoers rule to allo that22:23
clarkbah yup that is an idea22:23
fungipretty simple pattern match22:24
clarkbthat might be the simplest thing. The test-setup.sh script can add a rule to /etc/sudoers.d/foo and then I can sudo journalctl -u mariadb later22:24
clarkbany idea what that rule  looks like?22:25
funginormally i'd create a file like /etc/sudoers.d/mariadb-logs and then put a line in it like `zuul ALL ALL ALL = (root:root) NOPASSWD: /usr/bin/journalctl -u mariadb`22:28
clarkb`zuul ALL=/usr/bin/journalctl -u mariadb NOPASSWD:ALL` maybe22:28
fungier `zuul ALL = (root:root) NOPASSWD: /usr/bin/journalctl -u mariadb`22:28
fungiadapted from a similar rule on my systems for something else22:29
clarkbnow I have to figure out what it means22:29
fungianyway, easy enough to test22:29
fungiman 5 sudoers22:29
fungiit has examples22:29
clarkbya the manpage is like a 20 page long language specification22:30
* fungi is knocking off for the evening, need to prep for an overnight trip tomorrow22:30
clarkbenjoy22:30
clarkblooks like (root:root) means that you can run the command as root:root22:31
corvusi wonder if we should put a general sudo rule to allow journalctl in the image, so any opendev job can do that22:50
Clark[m]I like that idea22:54

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!