| @noonedeadpunk:matrix.org | Hey folks! I was wondering, if anything was done recently regarding FIPS in CI? As started seeing md5 being unavailable in our CI jobs: | 09:33 |
|---|---|---|
| https://zuul.opendev.org/t/openstack/build/a12ed42b5863490e9c51f37135daa277/log/job-output.txt#14965-15011 | ||
| @noonedeadpunk:matrix.org | as I can't really reproduce that locally so far | 10:13 |
| @noonedeadpunk:matrix.org | so it would be great to have a hold node, to check if I can find smth specific on the CI image | 10:25 |
| @fungicide:matrix.org | Dmitriy Rabotyagov: we don't have any way to enable fips mode on ubuntu, that requires special licenses added to get access to the required packages | 12:01 |
| @noonedeadpunk:matrix.org | well, there were discussions about cannonical willing to give smth out, so I was checking | 12:02 |
| @fungicide:matrix.org | it does though look like something ansible is calling (openssl?) doesn't like the checksum format | 12:02 |
| @fungicide:matrix.org | where is the cirros image checksum it's comparing to stored? | 12:02 |
| @noonedeadpunk:matrix.org | but I think I have found the issue just now: https://review.opendev.org/c/openstack/openstack-ansible-os_tempest/+/886165/8/vars/main.yml | 12:03 |
| @noonedeadpunk:matrix.org | it's ansible's get_url which does checksum verification | 12:03 |
| @noonedeadpunk:matrix.org | weird I haven't seen that locally, and that it took like 2 month or smth to see the problem | 12:05 |
| @fungicide:matrix.org | that's definitely changing the format of the string and not merely the hash value | 12:06 |
| @fungicide:matrix.org | so i agree, seems a likely candidate | 12:07 |
| @noonedeadpunk:matrix.org | I wonder if the reason why we haven't seen the issue earlier is some kind of zuul having repo in a desynced state or smth like that | 12:16 |
| @noonedeadpunk:matrix.org | but anyway | 12:16 |
| @noonedeadpunk:matrix.org | let's see if reverting the format works (it should) | 12:16 |
| -@gerrit:opendev.org- Zuul merged on behalf of Brian Haley: [opendev/irc-meetings] 980731: Move neutron team and CI meeting earlier by 1 hour https://review.opendev.org/c/opendev/irc-meetings/+/980731 | 12:50 | |
| @shrews:matrix.org | fungi: Clark thx for the bindep reviews/merge! since tomorrow marks exactly a year since the last release, any chance we'll see a new release in the near term? | 13:06 |
| @fungicide:matrix.org | shrews et al: there are currently 4 merged changes since bindep 2.13.0, 9a97635 is enough of a behavior change to warrant 2.14.0 as the next version (and is the only commit with a release note); there are currently 20 outstanding changes for review in bindep, are there any others we should try to get in asap before tagging? | 13:10 |
| @fungicide:matrix.org | it looks like 202717, 202718 and 202238 may be obsolete with shrews's latest change | 13:11 |
| @fungicide:matrix.org | or at least would need a different exit code | 13:12 |
| @fungicide:matrix.org | hah, those changes are mine actually, and over 8 years old at this point. think i'm just going to abandon them | 13:14 |
| @shrews:matrix.org | lol | 13:14 |
| @fungicide:matrix.org | so old i've long ago forgotten i'd even written them | 13:15 |
| @fungicide:matrix.org | okay, those are gone. skimming the rest, a bunch of them are my packaging-related updates that need to wait for us to drop support for some older python versions, and do-not-merge test changes related to them | 13:19 |
| @fungicide:matrix.org | i'll also abandon 605613 since it's tox-specific adjustments and we use nox now | 13:21 |
| @fungicide:matrix.org | there are a couple of old refactors (455832 and 456071), a 6yo wip change from ianw (753198), and then a few that look like maybe legit fixes/improvements we didn't finish reviewing: 689602, 703055, 735142, 735143 | 13:25 |
| @fungicide:matrix.org | none look particularly urgent to include before we release | 13:25 |
| @shrews:matrix.org | to be clear, not pressuring you for an immediate release, if you'd like time to review any outstanding changes. just hoping for one "soon-ish" :) | 13:27 |
| @fungicide:matrix.org | `9a97635 (HEAD, tag: 2.14.0, origin/master, origin/HEAD, gerrit/master, gerrit/HEAD) New exit code of 2 for input file parse errors.` | 13:28 |
| @fungicide:matrix.org | i propose to push that ^ and then it's probably time to talk about python versions | 13:28 |
| @fungicide:matrix.org | shrews: i didn't see any straight away, but encourage others to double-check that assertion | 13:29 |
| @fungicide:matrix.org | after the release, if we drop support for python 3.8 then i think we'll be able to merge 945403 and 945416, possibly also 940841 and 943976 | 13:34 |
| @clarkb:matrix.org | fungi that sha and tag lgtm. I think if we delay any longer then we're likely doing a release of bindep after the openstdack release just to avoid problems during release week. So no is probably good | 14:50 |
| @clarkb:matrix.org | * fungi that sha and tag lgtm. I think if we delay any longer then we're likely doing a release of bindep after the openstack release just to avoid problems during release week. So now is probably good | 14:53 |
| @fungicide:matrix.org | thanks! i'll go ahead and push it | 14:53 |
| @fungicide:matrix.org | and done, zuul's wheels should be in motion | 14:54 |
| @clarkb:matrix.org | if things have settled down maybe today is a good day for gitea 1.25.5: https://review.opendev.org/c/opendev/system-config/+/980808 | 15:00 |
| @fungicide:matrix.org | i think so, i can help keep an eye on it after lunch | 15:00 |
| @clarkb:matrix.org | cool I expect to be around for most of the day but do have to do the school run later and will probably also try to get a bike ride in before the rain returns | 15:01 |
| @clarkb:matrix.org | fungi: the change doesn't have any reviews yet if you're willing to do that too that would be great | 15:01 |
| @fungicide:matrix.org | yep | 15:01 |
| @clarkb:matrix.org | then we can figure out approval timing based on lunch schedules if it looks good | 15:01 |
| @clarkb:matrix.org | let me check that the daily run for gitea didn't fail last night either since we had that apt lock issue | 15:02 |
| @clarkb:matrix.org | https://zuul.opendev.org/t/openstack/build/81cd744542d44261b3d5fca12d8288da it succeeded | 15:02 |
| @clarkb:matrix.org | fungi: the goaccess report jobs are failing since we added new static servers and I expect we need to add their ssh host keys to some job vars? I don't think this is urgent and may be best to address once we have a longer term plan for the static servers? | 15:03 |
| @fungicide:matrix.org | yeah, i think we're going to have to make adjustments to the job to accommodate the split between servers anyway? | 15:05 |
| @clarkb:matrix.org | Hrm ya not sure how it would handle that if at all | 15:07 |
| @fungicide:matrix.org | also we have reports for some of the same sites on 3 different servers from different points in time as things were shuffled around | 15:08 |
| @fungicide:matrix.org | but also with the current swarm of bots i question even more whether those reports contain much of value | 15:09 |
| @fungicide:matrix.org | heading out to lunch, should be back in a bit | 15:22 |
| -@gerrit:opendev.org- Clark Boylan proposed: [opendev/system-config] 981315: Remove lxd-installer from our servers https://review.opendev.org/c/opendev/system-config/+/981315 | 16:02 | |
| @clarkb:matrix.org | That is a small cleanup I noticed yesterday ^ basically a straggler lxd related package that we can remove since we already remove lxd itself. | 16:02 |
| -@gerrit:opendev.org- Owen Jones proposed: [openstack/diskimage-builder] 981319: mellanox: remove qperf package from element https://review.opendev.org/c/openstack/diskimage-builder/+/981319 | 16:09 | |
| -@gerrit:opendev.org- Owen Jones proposed: [openstack/diskimage-builder] 981319: mellanox: remove qperf package from element https://review.opendev.org/c/openstack/diskimage-builder/+/981319 | 16:14 | |
| @mnasiadka:matrix.org | Any chance for a review on https://review.opendev.org/c/opendev/system-config/+/980851 ? | 16:35 |
| @mnasiadka:matrix.org | Clark: do you want me to workflow the Gitea upgrade - or some other time of day is better? | 16:41 |
| @clarkb:matrix.org | mnasiadka: now is good thanks | 16:43 |
| @clarkb:matrix.org | oh right that apt sources change was on my list to review. I'll review it now | 16:44 |
| @mnasiadka:matrix.org | Thanks | 16:45 |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [openstack/project-config] 981322: Add wandertracks-rail repo https://review.opendev.org/c/openstack/project-config/+/981322 | 16:46 | |
| @clarkb:matrix.org | mnasiadka: also is there a change to add the new openmetal mirror to our inventory yet? I should review that one if so | 16:47 |
| @mnasiadka:matrix.org | Yeah, it’s there - let me find it | 16:48 |
| @mnasiadka:matrix.org | I thought it is, but can’t find it - maybe it’s on my laptop - will push it in around 30 mins | 16:49 |
| @mnasiadka:matrix.org | https://review.opendev.org/c/opendev/system-config/+/981064 | 16:52 |
| @mnasiadka:matrix.org | There it is | 16:52 |
| @clarkb:matrix.org | perfect I suspect we can get that deployed today as well if fungi takes a look | 16:53 |
| @fungicide:matrix.org | oh, yep, on it | 16:57 |
| @fungicide:matrix.org | lgt | 16:58 |
| @fungicide:matrix.org | m | 16:58 |
| -@gerrit:opendev.org- Zuul merged on behalf of Monty Taylor https://matrix.to/#/@mordred:inaugust.com: [openstack/project-config] 981322: Add wandertracks-rail repo https://review.opendev.org/c/openstack/project-config/+/981322 | 17:02 | |
| @fungicide:matrix.org | ¡aventureros al trein! | 17:08 |
| @mordred:waterwanders.com | heck yeah! sometimes I like to aventureros al trein | 17:09 |
| @fungicide:matrix.org | les aventuriers du rail | 17:09 |
| @fungicide:matrix.org | zug um zug | 17:09 |
| @fungicide:matrix.org | the many international names of the "ticket to ride" board game | 17:10 |
| @fungicide:matrix.org | but you're living it! | 17:10 |
| @clarkb:matrix.org | I was just talking to someone how about caltran is like 8.50 between san francisco and sunnyvale compared to the $120 waymo and faster. | 17:13 |
| @fungicide:matrix.org | crazypants | 17:13 |
| @clarkb:matrix.org | waymo would be more competitive on time if they used freeways to be fair. But even then I think you're looking at just under an hour for each and a significant price savings to take the train and then waymo the last mile | 17:14 |
| @fungicide:matrix.org | flying cars... 'nuff said | 17:15 |
| -@gerrit:opendev.org- Zuul merged on behalf of Clark Boylan: [opendev/system-config] 980808: Upgrade gitea to 1.25.5 https://review.opendev.org/c/opendev/system-config/+/980808 | 17:37 | |
| -@gerrit:opendev.org- Zuul merged on behalf of Michal Nasiadka: [opendev/system-config] 981064: Add new mirror in openmetal https://review.opendev.org/c/opendev/system-config/+/981064 | 17:37 | |
| @clarkb:matrix.org | gitea09 and 10 have updated | 17:43 |
| @clarkb:matrix.org | my client and ip get gitea10 and it seems to work in the web ui (reports the new version too) | 17:44 |
| @clarkb:matrix.org | I'll wait for deployment to finish and then test git clone as its a bit harder to confirm the backend with the git client | 17:44 |
| @clarkb:matrix.org | all giteas should be upgraded now | 17:53 |
| @clarkb:matrix.org | buildset was successful too: https://zuul.opendev.org/t/openstack/buildset/ac3cd9b4988447829200f1ad916b15de | 17:53 |
| @fungicide:matrix.org | seems to still be working normally for me | 17:54 |
| @clarkb:matrix.org | git clone works for me | 17:54 |
| @fungicide:matrix.org | browsing, cloning | 17:54 |
| @clarkb:matrix.org | I'll try to find something that has replicated then I think we can consider this done | 17:54 |
| @clarkb:matrix.org | https://review.opendev.org/c/openstack/openstack-helm-images/+/981336 was just pushed a couple minutes after I verified all giteas updated. It shows up in gitea: https://opendev.org/openstack/openstack-helm-images/commit/205dcf1ac235cae6ed788a7641fcad23269e7bfc | 17:57 |
| @fungicide:matrix.org | lgtm! | 17:59 |
| @clarkb:matrix.org | yup now we wait for the new mirror to get configured. mnasiadka once that is done the next step is verifying that the mirror serves traffic at https://mirror02.iad3.openmetal.opendev.org and if it does we can update dns to point at it. Then we can delete the old server and its dns records. I don't think there is a rush to this so I'll probably let you continue to carry that forward as a way to gain familiarity etc. Let me know if there are any questions that come up | 18:03 |
| -@gerrit:opendev.org- Zuul merged on behalf of Owen Jones: [openstack/diskimage-builder] 981319: mellanox: remove qperf package from element https://review.opendev.org/c/openstack/diskimage-builder/+/981319 | 19:13 | |
| -@gerrit:opendev.org- David Ostrovsky proposed: [zuul/zuul-jobs] 896974: Add generic bazelisk build role https://review.opendev.org/c/zuul/zuul-jobs/+/896974 | 19:31 | |
| -@gerrit:opendev.org- David Ostrovsky proposed: [zuul/zuul-jobs] 896974: Add generic bazelisk build role https://review.opendev.org/c/zuul/zuul-jobs/+/896974 | 19:54 | |
| -@gerrit:opendev.org- Goutham Pacha Ravi proposed: [openstack/project-config] 981404: Add Code-Review and Rollcall-Vote to governance dashboard https://review.opendev.org/c/openstack/project-config/+/981404 | 20:07 | |
| -@gerrit:opendev.org- David Ostrovsky proposed: [zuul/zuul-jobs] 896974: Add generic bazelisk build role https://review.opendev.org/c/zuul/zuul-jobs/+/896974 | 20:12 | |
| -@gerrit:opendev.org- David Ostrovsky proposed: [zuul/zuul-jobs] 896974: Add generic bazelisk build role https://review.opendev.org/c/zuul/zuul-jobs/+/896974 | 20:38 | |
| @clarkb:matrix.org | fungi: I'm looking at the old infra root imap folders and I think we may want to keep the clouds/ folder contents, letsencrypt, pypi, and then services content except for transifex? | 20:47 |
| @clarkb:matrix.org | also related I'm trying to update two laptops becuse I need to configure imap for the new account(s) on them... | 20:47 |
| @clarkb:matrix.org | if we feel like that is too much then maybe we start with LE, pypi, and the services? | 20:52 |
| @fungicide:matrix.org | no i think that's fine. as long as i have a list to work from i'm happy to churn through those | 20:53 |
| @clarkb:matrix.org | I don't think we need all the gerrit spam | 20:53 |
| @clarkb:matrix.org | or jenkins etc | 20:53 |
| @fungicide:matrix.org | sounds like we still have about a month until the old account goes away | 20:53 |
| @clarkb:matrix.org | yup I think April 22 is the deadline | 20:53 |
| @fungicide:matrix.org | and at most it'll take me a few days, maybe i can knock it out over this weekend even | 20:54 |
| -@gerrit:opendev.org- David Ostrovsky proposed: [zuul/zuul-jobs] 896974: Add generic bazelisk build role https://review.opendev.org/c/zuul/zuul-jobs/+/896974 | 20:58 | |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!