*** weezS has quit IRC | 00:07 | |
*** galstrom is now known as galstrom_zzz | 00:16 | |
*** markvoelker has joined #openstack-ansible | 00:26 | |
*** markvoelker has quit IRC | 00:35 | |
*** xingchao has joined #openstack-ansible | 00:36 | |
*** Rodrigo__ has quit IRC | 00:39 | |
*** markvoelker has joined #openstack-ansible | 00:40 | |
*** Rodrigo_BR has joined #openstack-ansible | 00:40 | |
*** yifei has joined #openstack-ansible | 00:40 | |
*** xingchao has quit IRC | 00:40 | |
*** markvoelker_ has joined #openstack-ansible | 00:42 | |
*** markvoelker has quit IRC | 00:44 | |
*** yifei has quit IRC | 00:45 | |
*** yifei has joined #openstack-ansible | 00:47 | |
*** gouthamr has quit IRC | 00:48 | |
*** agrebennikov has quit IRC | 00:48 | |
*** masber has joined #openstack-ansible | 00:48 | |
*** markvoelker_ has quit IRC | 00:49 | |
*** Rodrigo_BR has quit IRC | 00:52 | |
*** hw_wutianwei has joined #openstack-ansible | 00:58 | |
*** markvoelker has joined #openstack-ansible | 00:58 | |
*** markvoelker has quit IRC | 01:09 | |
*** woodard_ has joined #openstack-ansible | 01:11 | |
*** woodard has quit IRC | 01:11 | |
*** xingchao has joined #openstack-ansible | 01:37 | |
*** xingchao has quit IRC | 01:42 | |
*** pbandark has quit IRC | 01:44 | |
*** gkadam has joined #openstack-ansible | 01:49 | |
*** dxiri has quit IRC | 01:49 | |
*** gouthamr has joined #openstack-ansible | 01:50 | |
*** thorst has joined #openstack-ansible | 01:58 | |
*** dxiri has joined #openstack-ansible | 02:02 | |
*** kukacz has quit IRC | 02:03 | |
*** dxiri has quit IRC | 02:06 | |
*** newmember has joined #openstack-ansible | 02:15 | |
*** vnogin has joined #openstack-ansible | 02:32 | |
*** chhavi has joined #openstack-ansible | 02:33 | |
*** kiennt26 has joined #openstack-ansible | 02:33 | |
*** vnogin has quit IRC | 02:37 | |
*** xingchao has joined #openstack-ansible | 02:37 | |
*** gouthamr has quit IRC | 02:40 | |
*** xingchao has quit IRC | 02:42 | |
*** gouthamr has joined #openstack-ansible | 02:45 | |
*** savvas has joined #openstack-ansible | 02:45 | |
*** bhujay has joined #openstack-ansible | 02:48 | |
*** thorst has quit IRC | 02:50 | |
*** chhavi has quit IRC | 02:50 | |
*** gkadam has quit IRC | 02:55 | |
*** chhavi has joined #openstack-ansible | 02:57 | |
*** thorst has joined #openstack-ansible | 03:08 | |
*** vnogin has joined #openstack-ansible | 03:10 | |
*** thorst has quit IRC | 03:13 | |
*** vnogin has quit IRC | 03:15 | |
*** chhavi has quit IRC | 03:17 | |
*** chhavi has joined #openstack-ansible | 03:22 | |
*** bhujay has quit IRC | 03:27 | |
*** vnogin has joined #openstack-ansible | 03:31 | |
*** gouthamr has quit IRC | 03:34 | |
*** vnogin has quit IRC | 03:36 | |
*** xingchao has joined #openstack-ansible | 03:38 | |
*** gouthamr has joined #openstack-ansible | 03:39 | |
logan- | boxrick: I think they added a group vars precedence thing in 2.4.. let me find it | 03:41 |
---|---|---|
*** xingchao has quit IRC | 03:43 | |
*** thorst has joined #openstack-ansible | 03:52 | |
logan- | boxrick: ansible_group_priority might be what you're looking for. heres the docs (they aren't in the ansible site docs yet but this was added in 2.4) https://github.com/ansible/ansible/pull/28777/files | 03:53 |
*** thorst has quit IRC | 03:54 | |
*** vnogin has joined #openstack-ansible | 03:58 | |
*** gouthamr has quit IRC | 03:59 | |
*** vnogin has quit IRC | 04:03 | |
*** jwitko has quit IRC | 04:07 | |
*** udesale has joined #openstack-ansible | 04:12 | |
*** bhujay has joined #openstack-ansible | 04:15 | |
*** savvas is now known as savvas` | 04:18 | |
*** chhavi has quit IRC | 04:19 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-rsyslog_client master: Sort file names within templates https://review.openstack.org/518442 | 04:20 |
openstackgerrit | Logan V proposed openstack/openstack-ansible stable/ocata: Properly detect RBD in use on Cinder backends https://review.openstack.org/518444 | 04:30 |
*** nshetty has joined #openstack-ansible | 04:31 | |
*** xingchao has joined #openstack-ansible | 04:39 | |
*** xingchao has quit IRC | 04:43 | |
*** thorst has joined #openstack-ansible | 04:46 | |
*** nshetty is now known as nshetty|brb | 04:46 | |
*** sxc731 has joined #openstack-ansible | 04:51 | |
*** woodard_ has quit IRC | 05:04 | |
*** nshetty|brb is now known as nshetty | 05:12 | |
*** sxc731 has left #openstack-ansible | 05:26 | |
*** cshen has joined #openstack-ansible | 05:46 | |
*** cshen has quit IRC | 05:57 | |
*** michelv has joined #openstack-ansible | 05:58 | |
*** cshen has joined #openstack-ansible | 05:58 | |
*** cshen has quit IRC | 06:09 | |
*** ivveh has joined #openstack-ansible | 06:12 | |
*** vnogin has joined #openstack-ansible | 06:14 | |
*** cshen has joined #openstack-ansible | 06:14 | |
*** Jack_Iv has joined #openstack-ansible | 06:14 | |
*** vnogin has quit IRC | 06:18 | |
*** vnogin has joined #openstack-ansible | 06:23 | |
*** bhujay has quit IRC | 06:26 | |
*** bruvik_ has quit IRC | 06:26 | |
*** bhujay has joined #openstack-ansible | 06:26 | |
*** Jack_Iv has quit IRC | 06:27 | |
*** Jack_Iv has joined #openstack-ansible | 06:28 | |
*** vnogin has quit IRC | 06:28 | |
*** cshen has quit IRC | 06:31 | |
*** cshen has joined #openstack-ansible | 06:34 | |
*** cshen has quit IRC | 06:36 | |
*** markvoelker has joined #openstack-ansible | 06:42 | |
*** markvoelker_ has joined #openstack-ansible | 06:43 | |
*** markvoelker_ has quit IRC | 06:45 | |
*** ajmaidak has quit IRC | 06:45 | |
*** armaan has quit IRC | 06:46 | |
*** armaan has joined #openstack-ansible | 06:46 | |
*** markvoelker has quit IRC | 06:46 | |
*** markvoelker has joined #openstack-ansible | 06:47 | |
*** markvoelker has quit IRC | 06:52 | |
*** markvoelker has joined #openstack-ansible | 06:54 | |
*** poopcat has quit IRC | 07:00 | |
*** ajmaidak has joined #openstack-ansible | 07:00 | |
*** bruvik_ has joined #openstack-ansible | 07:01 | |
*** jvidal has joined #openstack-ansible | 07:01 | |
*** poopcat has joined #openstack-ansible | 07:01 | |
*** arbrandes has joined #openstack-ansible | 07:01 | |
*** arbrandes1 has quit IRC | 07:03 | |
*** ajmaidak has quit IRC | 07:09 | |
*** thorst has quit IRC | 07:11 | |
*** Jack_Iv has quit IRC | 07:12 | |
openstackgerrit | Guoqiang Ding proposed openstack/openstack-ansible-os_horizon master: Update the doc link https://review.openstack.org/518467 | 07:13 |
*** thorst has joined #openstack-ansible | 07:15 | |
*** nshetty is now known as nshetty|lunch | 07:15 | |
*** Oku_OS-away is now known as Oku_OS | 07:15 | |
*** vnogin has joined #openstack-ansible | 07:24 | |
*** cshen has joined #openstack-ansible | 07:24 | |
*** gaoyanami has joined #openstack-ansible | 07:28 | |
*** vnogin has quit IRC | 07:29 | |
*** jvidal has quit IRC | 07:30 | |
*** ajmaidak has joined #openstack-ansible | 07:30 | |
*** ksrt has quit IRC | 07:31 | |
openstackgerrit | Vu Cong Tuan proposed openstack/openstack-ansible-os_ironic master: Do not use “-y” for package install https://review.openstack.org/518471 | 07:31 |
openstackgerrit | Vu Cong Tuan proposed openstack/openstack-ansible-os_octavia master: Do not use “-y” for package install https://review.openstack.org/518472 | 07:33 |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible stable/pike: PermitRootLogin for hosts group https://review.openstack.org/518473 | 07:33 |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible stable/ocata: PermitRootLogin for hosts group https://review.openstack.org/518474 | 07:34 |
*** Oku_OS is now known as Oku_OS-away | 07:38 | |
*** Oku_OS-away is now known as Oku_OS | 07:47 | |
*** mbuil has joined #openstack-ansible | 07:53 | |
*** chigang_ has joined #openstack-ansible | 07:54 | |
*** huxinhui_ has joined #openstack-ansible | 07:56 | |
*** cshen has quit IRC | 08:01 | |
*** cshen has joined #openstack-ansible | 08:03 | |
*** vnogin has joined #openstack-ansible | 08:06 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: SUSE: Avoid repositoy refresh and metadata clean up https://review.openstack.org/518486 | 08:10 |
*** vnogin has quit IRC | 08:11 | |
*** taseer1 has joined #openstack-ansible | 08:15 | |
*** Taseer has quit IRC | 08:16 | |
*** taseer2 has joined #openstack-ansible | 08:16 | |
*** taseer2 is now known as Taseer | 08:17 | |
*** taseer1 has quit IRC | 08:20 | |
*** nshetty|lunch is now known as nshetty | 08:22 | |
*** woodard has joined #openstack-ansible | 08:24 | |
*** woodard has quit IRC | 08:29 | |
*** gkadam has joined #openstack-ansible | 08:39 | |
mardim | Guys hello I have one question | 08:59 |
mardim | the vagrant boxes that CI uses to run the tests have already inside them the run_tests.sh ? | 09:00 |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518492 | 09:05 |
hwoarang | mardim: openstack ci doesn't use vagrant | 09:06 |
hwoarang | run_tests.sh is part of the repository so what do you mean when you say 'vagrant includes run_tests.sh' | 09:07 |
mardim | i mean this file https://github.com/openstack/openstack-ansible-os_neutron/blob/master/Vagrantfile | 09:07 |
hwoarang | yes but what is your question? | 09:07 |
hwoarang | run_tests.sh is in all the OSA repositories | 09:08 |
mardim | really ? | 09:08 |
hwoarang | yes | 09:08 |
mardim | where is in the os_neutron | 09:08 |
mardim | ? | 09:08 |
hwoarang | when you spin up a vagrant box, then in /vagrant you can see all the files included in that repository | 09:08 |
mardim | How the repository ends up in the vagrant box ? | 09:08 |
hwoarang | mardim: http://git.openstack.org/cgit/openstack/openstack-ansible-os_neutron/tree/run_tests.sh ? | 09:08 |
hwoarang | vagrant mounts your repo in /vagrant | 09:09 |
*** pbandark has joined #openstack-ansible | 09:09 | |
hwoarang | or rsyncs it there depending on the box | 09:09 |
hwoarang | just do 'vagrant up opensuse423' or 'vagrant up centos7' | 09:09 |
mardim | ok so if I want to runt the tests in a VM that I have (not vagrant ) I have just to run_tests.sh ? | 09:09 |
mardim | run* | 09:09 |
hwoarang | yes | 09:09 |
mardim | ok thank you :) | 09:09 |
hwoarang | no problem | 09:11 |
*** savvas`_ has joined #openstack-ansible | 09:12 | |
*** savvas` has quit IRC | 09:13 | |
*** taseer1 has joined #openstack-ansible | 09:13 | |
*** Taseer has quit IRC | 09:14 | |
*** taseer2 has joined #openstack-ansible | 09:14 | |
*** taseer1 has quit IRC | 09:18 | |
*** taseer2 is now known as Taseer | 09:19 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-lxc_hosts master: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518492 | 09:28 |
*** kukacz has joined #openstack-ansible | 09:37 | |
*** idlemind has quit IRC | 09:43 | |
*** hogepodge has quit IRC | 09:43 | |
*** sdake has quit IRC | 09:43 | |
*** jbadiapa has quit IRC | 09:43 | |
*** portante has quit IRC | 09:43 | |
*** gus has quit IRC | 09:43 | |
*** hwoarang has quit IRC | 09:43 | |
*** mpjetta has quit IRC | 09:43 | |
*** Aju has quit IRC | 09:43 | |
*** zul has quit IRC | 09:43 | |
*** serverascode has quit IRC | 09:43 | |
*** mrhillsman has quit IRC | 09:43 | |
*** vnogin has joined #openstack-ansible | 09:46 | |
*** csmart has quit IRC | 09:47 | |
*** evrardjp[m] has quit IRC | 09:48 | |
*** electrofelix has joined #openstack-ansible | 09:48 | |
*** idlemind has joined #openstack-ansible | 09:49 | |
*** hogepodge has joined #openstack-ansible | 09:49 | |
*** sdake has joined #openstack-ansible | 09:49 | |
*** jbadiapa has joined #openstack-ansible | 09:49 | |
*** mpjetta has joined #openstack-ansible | 09:49 | |
*** portante has joined #openstack-ansible | 09:49 | |
*** gus has joined #openstack-ansible | 09:49 | |
*** hwoarang has joined #openstack-ansible | 09:49 | |
*** Aju has joined #openstack-ansible | 09:49 | |
*** zul has joined #openstack-ansible | 09:49 | |
*** serverascode has joined #openstack-ansible | 09:49 | |
*** mrhillsman has joined #openstack-ansible | 09:49 | |
*** wspthr has quit IRC | 09:49 | |
*** serverascode has quit IRC | 09:50 | |
*** john51 has quit IRC | 09:50 | |
*** wspthr has joined #openstack-ansible | 09:52 | |
*** serverascode has joined #openstack-ansible | 09:52 | |
*** john51 has joined #openstack-ansible | 09:55 | |
*** vnogin has quit IRC | 09:56 | |
*** evrardjp[m] has joined #openstack-ansible | 09:56 | |
*** vnogin has joined #openstack-ansible | 09:59 | |
*** kiennt26 has quit IRC | 10:00 | |
*** vnogin has quit IRC | 10:03 | |
*** csmart has joined #openstack-ansible | 10:09 | |
*** SmearedBeard has quit IRC | 10:18 | |
*** SmearedBeard has joined #openstack-ansible | 10:21 | |
*** vnogin has joined #openstack-ansible | 10:29 | |
*** stuartgr has joined #openstack-ansible | 10:30 | |
*** hw_wutianwei has quit IRC | 10:30 | |
*** yifei has quit IRC | 10:30 | |
*** SmearedBeard has quit IRC | 10:41 | |
*** gparaskevas has joined #openstack-ansible | 10:41 | |
*** SmearedBeard has joined #openstack-ansible | 10:42 | |
gunix | can you use cinder volumes and have backups for cinder volumes if your compute is LXD ? | 10:49 |
*** udesale has quit IRC | 10:53 | |
*** armaan has quit IRC | 10:57 | |
*** gaoyanami has quit IRC | 11:03 | |
*** gparaskevas has quit IRC | 11:04 | |
*** woodard has joined #openstack-ansible | 11:25 | |
*** nshetty has quit IRC | 11:28 | |
*** nshetty has joined #openstack-ansible | 11:28 | |
*** woodard has quit IRC | 11:29 | |
*** dave-mccowan has joined #openstack-ansible | 11:29 | |
*** dave-mccowan has quit IRC | 11:38 | |
openstackgerrit | Merged openstack/openstack-ansible-os_octavia master: Do not use “-y” for package install https://review.openstack.org/518472 | 11:45 |
*** xingchao has joined #openstack-ansible | 11:45 | |
openstackgerrit | Merged openstack/openstack-ansible-os_ironic master: Do not use “-y” for package install https://review.openstack.org/518471 | 11:48 |
*** smatzek has joined #openstack-ansible | 11:48 | |
openstackgerrit | Merged openstack/openstack-ansible-ops stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518060 | 11:48 |
*** xingchao has quit IRC | 11:49 | |
openstackgerrit | Merged openstack/openstack-ansible-pip_install stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518085 | 11:54 |
Neptu_ | fatal: [aio1_rabbit_mq_container-4a33f11f]: FAILED! => {"changed": false, "cmd": "rabbitmqctl cluster_status | grep -w '<<\"openstack\">>'", "delta": "0:00:00.538194", "end": "2017-11-08 13:16:07.918579", "failed": true, "rc": 1, "start": "2017-11-08 13:16:07.380385", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []} | 12:24 |
Neptu_ | TASK [rabbitmq_server : Get rabbitmq cluster name] | 12:24 |
*** taseer1 has joined #openstack-ansible | 12:24 | |
Neptu_ | maybe not a relevant task | 12:24 |
*** Taseer has quit IRC | 12:25 | |
*** taseer2 has joined #openstack-ansible | 12:25 | |
*** savvas`_ has quit IRC | 12:26 | |
*** savvas` has joined #openstack-ansible | 12:26 | |
*** taseer1 has quit IRC | 12:28 | |
*** Rodrigo_BR has joined #openstack-ansible | 12:29 | |
Rodrigo_BR | Hello guys, I would like use two types for cinder backend, this is the correct way http://paste.openstack.org/show/625777/ | 12:31 |
*** nshetty is now known as nshetty|brb | 12:36 | |
openstackgerrit | Merged openstack/openstack-ansible-os_watcher stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518083 | 12:37 |
openstackgerrit | Merged openstack/openstack-ansible-os_gnocchi stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518067 | 12:40 |
openstackgerrit | Merged openstack/openstack-ansible-os_keystone stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518071 | 12:45 |
*** udesale has joined #openstack-ansible | 12:46 | |
openstackgerrit | Merged openstack/openstack-ansible-os_nova stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518077 | 12:47 |
openstackgerrit | Merged openstack/openstack-ansible-os_swift stable/ocata: Used cached git sources and enable depends-on https://review.openstack.org/518079 | 12:50 |
*** markvoelker has quit IRC | 12:50 | |
*** hw_wutianwei has joined #openstack-ansible | 13:03 | |
*** taseer2 is now known as Taseer | 13:05 | |
*** savvas`_ has joined #openstack-ansible | 13:08 | |
*** savvas` has quit IRC | 13:08 | |
mhayden | so apparently Ubuntu now has FIPS 140-2 support, but only if you're paying Canonical :/ | 13:11 |
*** savvas`_ has quit IRC | 13:11 | |
*** nshetty|brb is now known as nshetty | 13:12 | |
*** yifei has joined #openstack-ansible | 13:20 | |
*** strobelight has joined #openstack-ansible | 13:26 | |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Add scaffolding for contrib tasks https://review.openstack.org/514385 | 13:28 |
*** yifei has quit IRC | 13:33 | |
*** udesale has quit IRC | 13:36 | |
openstackgerrit | Merged openstack/openstack-ansible-rsyslog_client master: Sort file names within templates https://review.openstack.org/518442 | 13:38 |
*** Guest94913 has joined #openstack-ansible | 13:40 | |
*** michelv has quit IRC | 13:42 | |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts master: SUSE: Avoid repositoy refresh and metadata clean up https://review.openstack.org/518486 | 13:43 |
* mhayden yays | 13:43 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts stable/pike: SUSE: Avoid repositoy refresh and metadata clean up https://review.openstack.org/518530 | 13:47 |
*** armaan has joined #openstack-ansible | 13:48 | |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts master: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518492 | 13:50 |
*** armaan has quit IRC | 13:51 | |
*** yifei has joined #openstack-ansible | 13:52 | |
*** armaan has joined #openstack-ansible | 13:53 | |
mgariepy | morning everyone | 13:55 |
*** Guest94913 has quit IRC | 13:56 | |
*** woodard has joined #openstack-ansible | 13:59 | |
*** woodard has quit IRC | 13:59 | |
*** woodard has joined #openstack-ansible | 14:00 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts stable/pike: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518535 | 14:02 |
mhayden | ohai mgariepy | 14:02 |
andymccr | ohai mgariepy mhayden | 14:03 |
mgariepy | did you guys had a chance to test amd epyc cpus with openstack ? | 14:03 |
mgariepy | andymccr, I responded to : https://review.openstack.org/#/c/518013 | 14:04 |
mgariepy | :) | 14:04 |
andymccr | ugh the logic ot that one is horribad :P | 14:04 |
andymccr | ok lemme try | 14:04 |
andymccr | i have an idea | 14:04 |
*** thorst has quit IRC | 14:05 | |
openstackgerrit | Andy McCrae proposed openstack/ansible-hardening master: Change PermitRootLogin to allow alternate options https://review.openstack.org/518013 | 14:11 |
andymccr | ^ mgariepy - not sure if there is a better way, but best i can think of | 14:11 |
mgariepy | andymccr, almost there :) haha | 14:15 |
andymccr | just being difficult now ;P | 14:15 |
andymccr | fixed ;D | 14:15 |
openstackgerrit | Andy McCrae proposed openstack/ansible-hardening master: Change PermitRootLogin to allow alternate options https://review.openstack.org/518013 | 14:15 |
mgariepy | yeah I know | 14:16 |
mgariepy | anyone aware of something that does something like this ? https://github.com/openstack/mors | 14:16 |
*** bhujay has quit IRC | 14:17 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DNM] - Testing reduced packages https://review.openstack.org/507451 | 14:22 |
*** smatzek has quit IRC | 14:23 | |
openstackgerrit | Merged openstack/openstack-ansible-os_swift stable/newton: Used cached git sources and enable depends-on https://review.openstack.org/517696 | 14:24 |
openstackgerrit | Logan V proposed openstack/openstack-ansible stable/ocata: Properly detect RBD in use on Cinder backends https://review.openstack.org/518444 | 14:25 |
*** nshetty has quit IRC | 14:25 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts stable/pike: Fix docs/releasenotes pep8 E501 error https://review.openstack.org/518542 | 14:25 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts stable/pike: SUSE: Avoid repositoy refresh and metadata clean up https://review.openstack.org/518530 | 14:26 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts stable/pike: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518535 | 14:26 |
*** thorst has joined #openstack-ansible | 14:27 | |
*** udesale has joined #openstack-ansible | 14:31 | |
*** thorst has quit IRC | 14:31 | |
*** hw_wutianwei has quit IRC | 14:32 | |
*** jwitko has joined #openstack-ansible | 14:34 | |
*** udesale has quit IRC | 14:34 | |
*** udesale has joined #openstack-ansible | 14:34 | |
*** armaan has quit IRC | 14:36 | |
*** bauruine has quit IRC | 14:36 | |
*** armaan has joined #openstack-ansible | 14:37 | |
*** bauruine has joined #openstack-ansible | 14:37 | |
*** hw_wutianwei has joined #openstack-ansible | 14:44 | |
*** Rodrigo_BR has quit IRC | 14:49 | |
*** udesale has quit IRC | 14:50 | |
*** dxiri has joined #openstack-ansible | 14:56 | |
*** dxiri has quit IRC | 14:57 | |
*** timsim has left #openstack-ansible | 14:57 | |
*** esberglu has joined #openstack-ansible | 14:58 | |
mhayden | hwoarang: https://twitter.com/sysrich/status/928275950122471424 | 15:00 |
*** thorst has joined #openstack-ansible | 15:03 | |
*** bruvik_ has quit IRC | 15:04 | |
hwoarang | mhayden: hmm | 15:06 |
hwoarang | mhayden: also regarding the repo issues on opensuse i think there is no point in rechecking. there is package conflict somewhere so i am looking into it | 15:07 |
*** armaan has quit IRC | 15:08 | |
*** armaan has joined #openstack-ansible | 15:09 | |
hwoarang | mhayden: https://bugzilla.opensuse.org/show_bug.cgi?id=1009905 | 15:10 |
openstack | bugzilla.opensuse.org bug 1009905 in Upgrade Problems "File conflicts on /usr/bin/hostname between net-tools and hostname" [Normal,Confirmed] - Assigned to nemysis | 15:11 |
odyssey4me | how nice | 15:12 |
odyssey4me | I'd appreciate a quick review for https://review.openstack.org/518542to unblock patches to that branch/repo | 15:15 |
mhayden | hwoarang: ah, thanks for letting me know | 15:15 |
odyssey4me | it's a little odd that previous patches passed... not sure what's going on there | 15:16 |
mhayden | odyssey4me: done | 15:16 |
mhayden | odyssey4me: can i trade you for a gander at https://review.openstack.org/514385 ? | 15:17 |
odyssey4me | mhayden sure thing | 15:17 |
odyssey4me | ah yes, noticed this one the other day | 15:17 |
odyssey4me | not quite a fair trade, you know ;) | 15:17 |
mhayden | completely aware ;) | 15:19 |
mhayden | baie dankie? | 15:19 |
mhayden | :) | 15:19 |
*** Brew has joined #openstack-ansible | 15:19 | |
odyssey4me | :) | 15:20 |
hwoarang | odyssey4me: the mariadb package started pulling in the 'hostname' dependency and that conflicts with 'net-tools' | 15:25 |
hwoarang | this happened 2 days ago so any role which pulls in galera_server should have failed ever since | 15:25 |
hwoarang | (oh i just realized you were talking about a different patch :D) | 15:26 |
odyssey4me | hwoarang aha, that makes sense - I was wondering what was causing the jobs to fail now | 15:27 |
*** agrebennikov has joined #openstack-ansible | 15:29 | |
*** dxiri has joined #openstack-ansible | 15:32 | |
odyssey4me | hwoarang if you have a moment, could do review https://review.openstack.org/518337 please? | 15:34 |
*** phalmos has joined #openstack-ansible | 15:34 | |
hwoarang | on it | 15:34 |
*** udesale has joined #openstack-ansible | 15:35 | |
odyssey4me | also https://review.openstack.org/518530 - seeing as it's a backport of your patch :) | 15:35 |
odyssey4me | and https://review.openstack.org/518535 | 15:35 |
*** armaan has quit IRC | 15:37 | |
*** armaan has joined #openstack-ansible | 15:38 | |
*** bruvik_ has joined #openstack-ansible | 15:40 | |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/pike: Fix docs/releasenotes pep8 E501 error https://review.openstack.org/518542 | 15:42 |
*** udesale has quit IRC | 15:43 | |
*** bruvik_ has quit IRC | 15:44 | |
jwitko | Hey odyssey4me , mhayden , I was attempting to use the ansible-hardening role for the first time yesterday and I ran into some issues on a fresh ubuntu 16.04.3 vagrant build. I had to make the following changes to get it to run without issue and run in an idempotent manner. I'm happy to go through your process and submit a fix but I was just wondering if I'm missing something or you've seen this before: | 15:53 |
jwitko | https://github.com/AnonosDev/ansible-hardening/commit/52796452a6c33d4d06303d3b6f233fd57d36df49 | 15:53 |
*** dxiri has quit IRC | 15:55 | |
*** eumel8 has joined #openstack-ansible | 15:55 | |
*** xingchao has joined #openstack-ansible | 15:55 | |
jwitko | The issues I was getting were two-fold | 15:59 |
jwitko | 1) After the role was applied the ubuntu user could not access its own home directory | 15:59 |
*** xingchao has quit IRC | 16:00 | |
jwitko | 2) ClamAV would automatically update upon install and the update task would fail as it was already running | 16:00 |
odyssey4me | #2 sounds familiar - this might have been somethign we solved in STIGv6 but has fallen through the cracks for STIGv7 due to the extensive rewriting involved | 16:03 |
jwitko | OK, so how would you like me to proceed? I've honestly been working with your guys tooling for so long but could never understand the launchpad bug fix process | 16:07 |
*** Oku_OS is now known as Oku_OS-away | 16:17 | |
*** vnogin has quit IRC | 16:20 | |
*** Rodrigo_BR has joined #openstack-ansible | 16:20 | |
*** vnogin has joined #openstack-ansible | 16:20 | |
*** cshen_ has joined #openstack-ansible | 16:22 | |
*** mwe1 has quit IRC | 16:24 | |
*** vnogin has quit IRC | 16:25 | |
mhayden | jwitko: looking at your diff right quick | 16:26 |
*** cshen_ has quit IRC | 16:26 | |
jwitko | cool thanks | 16:26 |
*** yifei has quit IRC | 16:26 | |
mhayden | jwitko: so this looks like two separate bugs -- both of which seem to be valid | 16:28 |
jwitko | a nice, a two-fer | 16:28 |
mhayden | let me run back and check the stig on V-720 | 16:28 |
mhayden | 17/19/21 | 16:28 |
*** cshen_ has joined #openstack-ansible | 16:29 | |
*** smatzek has joined #openstack-ansible | 16:29 | |
mhayden | so your check for 'nobody' makes sense | 16:30 |
mhayden | but on the mode, the STIG requires that permissions on the home directory itself are 750 or less | 16:31 |
mhayden | https://docs.openstack.org/ansible-hardening/latest/rhel7/domains/file_perms.html#v-72017 | 16:31 |
mhayden | but the mode here SHOULD handle that: https://github.com/openstack/ansible-hardening/blob/master/tasks/rhel7stig/file_perms.yml#L108 | 16:31 |
mhayden | are you seeing something different? | 16:31 |
mhayden | it removes the setuid bit (-X), removes read/setgid from group (-ws) and removes everything from others (-rwxt) | 16:32 |
*** newmember has quit IRC | 16:32 | |
* mhayden spins up a server to test | 16:32 | |
mhayden | jwitko: have you opened launchpad bugs before? | 16:33 |
jwitko | I believe I've opened a few | 16:33 |
*** newmember has joined #openstack-ansible | 16:33 | |
jwitko | was hoping to submit a fix instead of just opening a bug | 16:33 |
mhayden | if you could open two separate ones for those, that'd be great | 16:33 |
jwitko | sure, np | 16:33 |
mhayden | well the bug helps us track the fix + backports | 16:33 |
mhayden | we can assign patches to that bug in multiple branches | 16:33 |
mhayden | https://bugs.launchpad.net/openstack-ansible | 16:34 |
jwitko | very cool | 16:34 |
jwitko | totally unrelated question, do you guys prefer launchpad to github/gitlab or were you just going with the openstack flow ? | 16:34 |
mhayden | well, ansible-hardening is under the list of openstack-ansible deliverables | 16:34 |
mhayden | so everything goes through the openstackisms for that reason | 16:35 |
jwitko | mhayden, now that I'm reporting this bug i think it might be 3 total | 16:37 |
mhayden | hah, okay | 16:37 |
jwitko | you have: 1) breaking ubuntu home dir access | 16:37 |
jwitko | 2) Same task errors out if user "nobody" is found | 16:38 |
jwitko | 3) clamAV running twice | 16:38 |
jwitko | https://github.com/AnonosDev/ansible-hardening/commit/52796452a6c33d4d06303d3b6f233fd57d36df49#diff-cea3f0a867615168fd70d628161225fbR112 | 16:38 |
jwitko | #2 is the "new" one | 16:38 |
*** hw_wutianwei has quit IRC | 16:38 | |
mhayden | cool , okay | 16:38 |
jwitko | I had to add that line so that it skipped the nobody user | 16:38 |
mhayden | okay, it's confirmed: https://paste.fedoraproject.org/paste/Slk-rmQIcS5idXnRw~gqqw | 16:39 |
mhayden | test3 was made after the role was applied | 16:39 |
mhayden | that's unusual | 16:39 |
openstackgerrit | Dimitrios Markou proposed openstack/openstack-ansible-os_neutron master: [DO_NOT_MERGE] Add OvS-NSH support https://review.openstack.org/517259 | 16:41 |
mhayden | jwitko: so i think this is the solution instead -> https://paste.fedoraproject.org/paste/~XhbvVDUBtzfgB00phiLcg | 16:44 |
mhayden | i wasn't aware you provide a numeric mask with a minus to chmod | 16:45 |
* mhayden learned something new | 16:45 | |
*** openstackgerrit has quit IRC | 16:48 | |
*** openstackgerrit has joined #openstack-ansible | 16:51 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-tests master: Always quote the filesystem permissions https://review.openstack.org/518577 | 16:51 |
*** dxiri has joined #openstack-ansible | 16:51 | |
mhayden | jwitko: let me know when you have those bugs up | 16:52 |
*** cshen_ has quit IRC | 16:54 | |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Always quote the filesystem permissions https://review.openstack.org/518580 | 16:56 |
*** xingchao has joined #openstack-ansible | 16:56 | |
mhayden | jwitko: i made an over-arching one for the letter-based modes https://bugs.launchpad.net/openstack-ansible/+bug/1731005 | 16:58 |
openstack | Launchpad bug 1731005 in openstack-ansible "ansible-hardening: Filesystem modes with letters are not working" [High,Confirmed] - Assigned to Major Hayden (rackerhacker) | 16:58 |
*** xingchao has quit IRC | 17:01 | |
*** TxGirlGeek has joined #openstack-ansible | 17:03 | |
openstackgerrit | Merged openstack/openstack-ansible master: Zuul: add file extension to playbook path https://review.openstack.org/516098 | 17:28 |
*** openstackgerrit has quit IRC | 17:32 | |
*** gkadam has quit IRC | 17:40 | |
jwitko | mhayden, wow. i don't even know what those chmods are doing lol | 17:45 |
jwitko | although i can see the results | 17:45 |
*** openstackgerrit has joined #openstack-ansible | 17:49 | |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Fix filesystem permission masks https://review.openstack.org/518593 | 17:49 |
mhayden | jwitko: ^^ | 17:50 |
*** LiterateHawk_ has quit IRC | 17:53 | |
openstackgerrit | Merged openstack/openstack-ansible master: Fix the doc url in README https://review.openstack.org/518307 | 17:58 |
electrocucaracha | hey there, I'm testing an All-in-One deployment behind a corporate proxy. Even after configuring the user_variables.yml I'm still struggling with timeouts for the pip_install role https://github.com/openstack/openstack-ansible/blob/master/tests/bootstrap-aio.yml#L22 | 17:59 |
electrocucaracha | so I'm not sure if I'm missing something | 18:00 |
jwitko | mhayden, looks good! | 18:02 |
jwitko | How do I review? | 18:02 |
jwitko | or maybe i'm not allowed to review | 18:02 |
mhayden | do you have an openstack account? | 18:05 |
jwitko | i have a launchpad account | 18:06 |
jwitko | i gave a reply with a +1 and the success of my testing with the changes | 18:06 |
jwitko | is an openstack account tied into the whole ubuntu launchpad thing ? | 18:06 |
*** thorst has quit IRC | 18:07 | |
*** thorst has joined #openstack-ansible | 18:08 | |
jwitko | mhayden, ^ | 18:09 |
*** thorst has quit IRC | 18:12 | |
jwitko | mhayden, also, just to confirm, that only fixes the first bug right? https://bugs.launchpad.net/openstack-ansible/+bug/1730994 | 18:18 |
openstack | Launchpad bug 1730994 in openstack-ansible "file_perms.yml breaks user directory access" [Undecided,New] | 18:18 |
*** thorst has joined #openstack-ansible | 18:26 | |
mhayden | jwitko: so the patch i just put up should fix that, too | 18:30 |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Fix filesystem permission masks https://review.openstack.org/518593 | 18:31 |
mhayden | hmm but now i broke ssh it seems | 18:32 |
*** stuartgr has quit IRC | 18:37 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible-repo_build master: [DNM] - Testing repo_build https://review.openstack.org/518599 | 18:37 |
*** newmember has quit IRC | 18:44 | |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/pike: SUSE: Avoid repositoy refresh and metadata clean up https://review.openstack.org/518530 | 18:46 |
*** hachi_ has joined #openstack-ansible | 18:50 | |
Rodrigo_BR | Hello I am receiving this error on deployment: fatal: [control01_rabbit_mq_container-777a8d12]: FAILED! => {"changed": false, "cmd": "rabbitmqctl -q cluster_status | grep '{cluster_name,<<\"openstack\">>}'", "delta": "0:00:00.969529", "end": "2017-11-08 16:37:44.535895", " | 18:55 |
Rodrigo_BR | failed": true, "rc": 1, "start": "2017-11-08 16:37:43.566366", "stderr": "", "stderr_lines": [ ], "stdout": "", "stdout_lines": []} | 18:55 |
Rodrigo_BR | for all 3 controllers nodes | 18:56 |
*** xingchao has joined #openstack-ansible | 18:58 | |
*** poopcat has quit IRC | 19:00 | |
*** TxGirlGeek has quit IRC | 19:01 | |
*** cshen_ has joined #openstack-ansible | 19:01 | |
*** xingchao has quit IRC | 19:02 | |
*** poopcat has joined #openstack-ansible | 19:03 | |
*** bruvik_ has joined #openstack-ansible | 19:04 | |
*** eumel8 has quit IRC | 19:05 | |
*** mbuil has quit IRC | 19:06 | |
*** albertcard1 has joined #openstack-ansible | 19:07 | |
*** poopcat has quit IRC | 19:07 | |
*** cshen_ has quit IRC | 19:08 | |
*** bruvik_ has quit IRC | 19:08 | |
*** electrofelix has quit IRC | 19:11 | |
*** cshen_ has joined #openstack-ansible | 19:12 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DNM] - Testing reduced packages https://review.openstack.org/507451 | 19:14 |
ccha | about openstack_user_config.yml.test.example, there is no log_hosts: is it normal? since in openstack_user_config.yml.example is # Level: log_hosts (required) | 19:16 |
*** cshen_ has quit IRC | 19:19 | |
*** cshen_ has joined #openstack-ansible | 19:21 | |
Rodrigo_BR | someone ? | 19:25 |
SmearedBeard | Rodrigo_BR I got the same, but carried out, things are working as expected | 19:27 |
Rodrigo_BR | SmearedBeard: Thank you ! | 19:31 |
hwoarang | odyssey4me: are you around? | 19:36 |
*** thorst has quit IRC | 19:40 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_tempest master: Add task to allow creation of provided roles https://review.openstack.org/518611 | 19:48 |
*** cshen_ has quit IRC | 19:51 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_barbican master: Use tempest plugin for functional testing https://review.openstack.org/518612 | 19:51 |
jrosser | Rodrigo_BR: check the tasks but i think that might use a rescue clause | 19:55 |
jrosser | so you still see the failed task as red/fatal but a subsequent task then kicks in as a result | 19:55 |
*** xingchao has joined #openstack-ansible | 19:58 | |
*** armaan has quit IRC | 19:58 | |
*** cshen_ has joined #openstack-ansible | 20:02 | |
*** xingchao has quit IRC | 20:03 | |
*** galstrom_zzz is now known as galstrom | 20:09 | |
*** snowman4839 has quit IRC | 20:13 | |
*** galstrom is now known as galstrom_zzz | 20:15 | |
*** snowman4839 has joined #openstack-ansible | 20:17 | |
*** thorst has joined #openstack-ansible | 20:33 | |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Fix filesystem permission masks https://review.openstack.org/518593 | 20:41 |
openstackgerrit | Major Hayden proposed openstack/ansible-hardening master: Always search for ssh keys https://review.openstack.org/518615 | 20:44 |
*** thorst has quit IRC | 20:49 | |
*** thorst has joined #openstack-ansible | 20:50 | |
*** newmember has joined #openstack-ansible | 20:50 | |
*** thorst has quit IRC | 20:55 | |
*** armaan has joined #openstack-ansible | 20:55 | |
*** cshen_ has quit IRC | 20:59 | |
*** xingchao has joined #openstack-ansible | 20:59 | |
*** Rodrigo_BR has quit IRC | 21:00 | |
*** xingchao has quit IRC | 21:03 | |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts stable/pike: tasks: lxc_cache_create: Use threads when compressing base image https://review.openstack.org/518535 | 21:06 |
*** newmember has quit IRC | 21:10 | |
*** bruvik_ has joined #openstack-ansible | 21:12 | |
*** hachi_ has quit IRC | 21:14 | |
*** thorst has joined #openstack-ansible | 21:22 | |
*** deadnull has joined #openstack-ansible | 21:23 | |
openstackgerrit | Markos Chandras (hwoarang) proposed openstack/openstack-ansible master: [DNM] - Testing reduced packages https://review.openstack.org/507451 | 21:25 |
*** smatzek has quit IRC | 21:29 | |
*** smatzek has joined #openstack-ansible | 21:32 | |
*** smatzek has quit IRC | 21:36 | |
mcarden | electrocucaracha: This may be of use to you - https://blog.christophersmart.com/2016/08/09/setting-up-openstack-ansible-all-in-one-behind-a-proxy/ | 21:39 |
*** thorst has quit IRC | 21:50 | |
gunix | what do you think about scaleio vs ceph ? | 21:52 |
*** schwicht has joined #openstack-ansible | 21:54 | |
*** smatzek has joined #openstack-ansible | 22:00 | |
*** smatzek has quit IRC | 22:03 | |
*** Brew has quit IRC | 22:16 | |
*** deadnull has quit IRC | 22:17 | |
*** jwitko has quit IRC | 22:18 | |
SamYaple | gunix: ceph. always ceph | 22:18 |
*** phalmos has quit IRC | 22:31 | |
*** threestrands has joined #openstack-ansible | 22:41 | |
*** threestrands has quit IRC | 22:41 | |
*** threestrands has joined #openstack-ansible | 22:41 | |
electrocucaracha | thanks mcarden , what's interesting is that the env variables has to be previously setup in /etc/environment file and later the open stack_proxy_settings.yml is doing the same http://git.openstack.org/cgit/openstack/openstack-ansible-openstack_hosts/tree/tasks/openstack_proxy_settings.yml | 22:49 |
*** schwicht has quit IRC | 22:59 | |
*** esberglu has quit IRC | 23:03 | |
*** esberglu has joined #openstack-ansible | 23:03 | |
*** esberglu has quit IRC | 23:08 | |
*** hamzy_ has joined #openstack-ansible | 23:17 | |
*** esberglu has joined #openstack-ansible | 23:23 | |
openstackgerrit | Merged openstack/openstack-ansible stable/newton: Add missing zuul v3 job definition https://review.openstack.org/518337 | 23:26 |
*** newmember has joined #openstack-ansible | 23:37 | |
*** thorst has joined #openstack-ansible | 23:47 | |
openstackgerrit | Merged openstack/openstack-ansible stable/pike: PermitRootLogin for hosts group https://review.openstack.org/518473 | 23:50 |
openstackgerrit | Merged openstack/openstack-ansible stable/ocata: PermitRootLogin for hosts group https://review.openstack.org/518474 | 23:50 |
*** thorst has quit IRC | 23:51 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!