| @mordred:waterwanders.com | I'm also going to contribute a flag for "I wanna run podman rootless" ... Because that install is a smidge different from the current ensure-podman behavior | 00:20 |
|---|---|---|
| -@gerrit:opendev.org- OpenStack Proposal Bot proposed: [openstack/project-config] 990586: Normalize projects.yaml https://review.opendev.org/c/openstack/project-config/+/990586 | 02:23 | |
| -@gerrit:opendev.org- Zuul merged: [openstack/project-config] 990586: Normalize projects.yaml https://review.opendev.org/c/openstack/project-config/+/990586 | 12:59 | |
| @jim:acmegating.com | > <@mordred:waterwanders.com> also - I haven't tracked this down fully yet, but I have container_command set to podman, but the buildset registry roles enforce installing docker, and default to using upstream repos, which is how I hit that. there is a comment in buildset-registry saying it only works with docker and not podman, which I remember corvus saying something about last time I was poking at things a few months ago, but I've forgotten the specifics. I'll try to nerdsnipe myself into sorting through whatever that all is | 14:19 |
| can you point to this comment? | ||
| @mordred:waterwanders.com | The failing version of the job where it's trying to install docker even though I've requested podman is on PS5 https://zuul.opendev.org/t/opendev/build/a6f58eda3628475d91adc4a62a27a968 | 14:48 |
| @mordred:waterwanders.com | Gimme just a bit and I'll try to isolate that a smidge more, on my phone right now | 14:49 |
| @jim:acmegating.com | oh i see the comment. it's a little vague. | 15:07 |
| @jim:acmegating.com | it may be helpful to distinguish the zuul-jobs roles, which i think are intended to work with both, and the opendev use of those, which does have some hard-coded docker stuff. | 15:10 |
| @mordred:waterwanders.com | corvus: https://opendev.org/opendev/base-jobs/src/branch/master/playbooks/buildset-registry/pre.yaml#L2-L8 is the culprit for that specific thing. ... and yes, the zuul-jobs support both. almost ready with a patch that will bring the parity to the opendev jobs too | 15:21 |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: | 16:08 | |
| - [zuul/zuul-jobs] 990825: Add rootless podman support to ensure-podman https://review.opendev.org/c/zuul/zuul-jobs/+/990825 | ||
| - [zuul/zuul-jobs] 990826: Flesh out podman support for using buildset registry https://review.opendev.org/c/zuul/zuul-jobs/+/990826 | ||
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [opendev/base-jobs] 990828: Honor container_command in buildset-registry playbooks https://review.opendev.org/c/opendev/base-jobs/+/990828 | 16:19 | |
| @mordred:waterwanders.com | corvus: ^^ ok - those are updates based on yesterday's drizzle hacking. I've got a local workaround currently | 16:19 |
| @mordred:waterwanders.com | also - i don't know if it's intentional - but opendev-buildset-registry-consumer does not actually seem to use the buildset registry. All it does is pull-from-intermediate-registry | 16:22 |
| @mordred:waterwanders.com | If that is intentional ... it's a little confusingly named. If not, I'd maybe suggest I should add use-buildset-registry to it? Current use case - a job that builds a container image, and then a second job that does not build any images but runs them. system-config-run uses opendev-buildset-registry-consumer - but does a use-buildset-registry in its pre playbook. Same with zuul-quick-start. | 16:26 |
| @mordred:waterwanders.com | Or I can just add a pre-playbook that does ensure-podman and use-buildset-registry on my consuming job if that's the intended pattern | 16:26 |
| @jim:acmegating.com | mordred: intentional, that's there because of the secret. lots of ways to use the registry and that one is agnostic. the docs here anticipate that you will add use-buildset-registry to any job that uses it: https://opendev.org/opendev/base-jobs/raw/branch/master/doc/source/docker-image.rst (section "A Repository with Producers and Consumers") | 16:44 |
| @mordred:waterwanders.com | corvus: ah - nod AHHHHHH - I see where my confusion came from | 16:45 |
| @mordred:waterwanders.com | corvus: for some reason - for the MANY times I've read that doc - my brain has seen "A Repository with Producers and Consumers" and read "A Job With Producers and Consumers" - and I've skipped right over it because I've thought "but I want a job that just consumes after something else produced" | 16:46 |
| @mordred:waterwanders.com | total total brain derp | 16:46 |
| @mordred:waterwanders.com | (I can't tell you how many times I've read through that and been confused as to why what seems like a clear use case isn't handled) | 16:46 |
| @fungicide:matrix.org | a very small patch to reiterate that point in order to avoid conflating the two concepts could still make sense | 16:47 |
| @jim:acmegating.com | (to put it another way: that's the minimal job that populates the registry so that people can add whatever roles they want to their jobs in their jobs, but that one has to be there because of the secret) | 16:45 |
| @mordred:waterwanders.com | yeah - but problem is - I skipped the section based on mis-reading the title because I'm a derp | 16:48 |
| @mordred:waterwanders.com | so - yes - once I READ the actual section, it's very clear | 16:48 |
| @jim:acmegating.com | a noun with nouns and nouns | 16:49 |
| @mordred:waterwanders.com | yup | 16:49 |
| @mordred:waterwanders.com | that said - sake of argument (and similar to how the build-base job works) ... could we have the job that has the intermediate registry secret exist - like opendev-pull-from-intermediate-registry and then have opendev-buildset-registry inherit from it and add use-buildset-registry/ensure(docker|podman) and have that still be a safe construct? | 16:51 |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990825: Add rootless podman support to ensure-podman https://review.opendev.org/c/zuul/zuul-jobs/+/990825 | 17:02 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990826: Flesh out podman support for using buildset registry https://review.opendev.org/c/zuul/zuul-jobs/+/990826 | 17:05 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990825: Add rootless podman support to ensure-podman https://review.opendev.org/c/zuul/zuul-jobs/+/990825 | 18:11 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: | 18:14 | |
| - [zuul/zuul-jobs] 990825: Add rootless podman support to ensure-podman https://review.opendev.org/c/zuul/zuul-jobs/+/990825 | ||
| - [zuul/zuul-jobs] 990826: Flesh out podman support for using buildset registry https://review.opendev.org/c/zuul/zuul-jobs/+/990826 | ||
| @mordred:waterwanders.com | Clark: ^^ I rebased those on top of https://review.opendev.org/c/zuul/zuul-jobs/+/974770 - because the docker image test jobs don't seem to have passed for a while and I think you wrote that patch to fix it. (the failing docker jobs on the rootless podman patch seem to be failing in ways consistent with the commit message in your change) | 18:16 |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed on behalf of Clark Boylan: [zuul/zuul-jobs] 974770: Set localhost as an insecure registry during testing https://review.opendev.org/c/zuul/zuul-jobs/+/974770 | 19:16 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990847: Fix multiarch test job to work with buildkit attestations https://review.opendev.org/c/zuul/zuul-jobs/+/990847 | 19:16 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990847: Fix test jobs to work with buildkit attestations https://review.opendev.org/c/zuul/zuul-jobs/+/990847 | 19:28 | |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: | 19:47 | |
| - [zuul/zuul-jobs] 990825: Add rootless podman support to ensure-podman https://review.opendev.org/c/zuul/zuul-jobs/+/990825 | ||
| - [zuul/zuul-jobs] 990826: Flesh out podman support for using buildset registry https://review.opendev.org/c/zuul/zuul-jobs/+/990826 | ||
| @fungicide:matrix.org | just a heads up, pip 26.1.2 was released earlier today | 19:56 |
| @mordred:waterwanders.com | \o/ | 20:04 |
| -@gerrit:opendev.org- Monty Taylor https://matrix.to/#/@mordred:inaugust.com proposed: [zuul/zuul-jobs] 990850: Add resolute and trixie to zuul-jobs test matrix https://review.opendev.org/c/zuul/zuul-jobs/+/990850 | 20:11 | |
| -@gerrit:opendev.org- Zuul merged on behalf of Clark Boylan: [zuul/zuul-jobs] 974770: Set localhost as an insecure registry during testing https://review.opendev.org/c/zuul/zuul-jobs/+/974770 | 20:21 | |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!