Friday, 2018-05-04

*** gyee has quit IRC00:02
*** markvoelker has quit IRC00:05
*** tosky has quit IRC00:05
*** hamzy has joined #openstack-ansible00:09
*** cmart has quit IRC00:55
*** cjloader has quit IRC00:55
*** markvoelker has joined #openstack-ansible01:05
*** spsurya has joined #openstack-ansible01:14
*** markvoelker has quit IRC01:40
*** klamath has joined #openstack-ansible01:52
*** armaan has joined #openstack-ansible02:13
*** armaan has quit IRC02:14
idlemind... k updated the cell's mysql paths as suggested in os-nova irc ... now i get http://paste.openstack.org/show/720333/ still .. i can ping the host in question from hc1 so i truly don't understand the could not resolve hostname and i can't clearly see why or where a compute node (hc1, for me) is trying to ssh to the conductor node02:22
idlemindseems my conductor containers are not getting the ssh authorized keys file setup in /var/lib/nova/.ssh02:27
*** markvoelker has joined #openstack-ansible02:37
*** esberglu has quit IRC02:47
*** cjloader has joined #openstack-ansible03:04
*** markvoelker has quit IRC03:10
*** dave-mccowan has quit IRC03:14
*** cjloader has quit IRC03:42
*** cjloader has joined #openstack-ansible03:42
*** nicolasbock has quit IRC03:44
*** cjloader has quit IRC03:47
*** klamath has quit IRC03:50
*** mwarad has joined #openstack-ansible03:57
*** dxiri has quit IRC03:58
*** dxiri_ has joined #openstack-ansible04:01
*** poopcat has quit IRC04:04
*** markvoelker has joined #openstack-ansible04:08
*** radeks has joined #openstack-ansible04:38
*** mma has quit IRC04:38
*** markvoelker has quit IRC04:41
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584504:45
*** cjloader has joined #openstack-ansible05:01
*** cjloader has quit IRC05:06
*** ianw has quit IRC05:06
*** berendt has quit IRC05:15
*** mubix has quit IRC05:15
*** bauruine has quit IRC05:15
*** sdake has quit IRC05:15
*** Chealion has quit IRC05:15
*** hogepodge has quit IRC05:15
*** charz has quit IRC05:15
*** udesale has joined #openstack-ansible05:15
*** sdake has joined #openstack-ansible05:15
*** sdake has quit IRC05:15
*** sdake has joined #openstack-ansible05:15
*** charz has joined #openstack-ansible05:15
*** mubix has joined #openstack-ansible05:15
*** Chealion has joined #openstack-ansible05:16
*** hogepodge has joined #openstack-ansible05:16
*** berendt_ has joined #openstack-ansible05:16
*** bauruine has joined #openstack-ansible05:21
*** mma has joined #openstack-ansible05:30
*** mma has quit IRC05:35
*** markvoelker has joined #openstack-ansible05:38
*** Taseer has quit IRC05:41
*** threestrands has quit IRC05:47
*** klamath has joined #openstack-ansible05:51
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584505:52
*** ianw has joined #openstack-ansible05:55
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible-lxc_hosts stable/ocata: Fix proper versions pinning for test  https://review.openstack.org/56621605:55
*** klamath has quit IRC05:56
*** cjloader has joined #openstack-ansible06:01
*** cjloader has quit IRC06:06
*** markvoelker has quit IRC06:11
*** evin has joined #openstack-ansible06:12
nsinghhi evrardjp goodmorning.. :)06:22
*** klamath has joined #openstack-ansible06:29
*** DanyC has quit IRC06:31
*** ppetit has joined #openstack-ansible06:37
*** dmsimard has quit IRC06:39
*** dmsimard has joined #openstack-ansible06:39
*** yolanda_ has joined #openstack-ansible06:42
*** pcaruana has joined #openstack-ansible06:43
*** yolanda has quit IRC06:45
*** cjloader has joined #openstack-ansible06:59
*** radeks has quit IRC07:00
*** mma has joined #openstack-ansible07:00
*** cjloader has quit IRC07:04
evrardjpnsingh: good mornin07:04
evrardjplet's do this07:04
evrardjpwhat's your status for now?07:05
nsinghi installed masakarimonitor and pacemaker services.07:07
nsinghevrardjp: I was asking about this file http://paste.openstack.org/show/720274/07:08
evrardjpand everything works fine on your machine?07:08
evrardjpin my case I will push infra for the base jobs let me do that now07:08
*** markvoelker has joined #openstack-ansible07:08
evrardjpuse a ini file for now07:08
nsinghi can see the servces running on my machine not tested functionally yet07:08
evrardjpthat will be easier07:08
evrardjpfor now you can have an ini file into /etc/openstack_deploy/inventory.ini07:09
evrardjpok07:09
nsinghwhat about the services on compute nodes. how to configure this part.07:10
*** epalper has joined #openstack-ansible07:13
evrardjpnot sure what you meant there07:14
*** cjloader has joined #openstack-ansible07:16
*** mbuil has joined #openstack-ansible07:18
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: [DNM] Test integrated build  https://review.openstack.org/56502507:18
nsinghwe discussed about the masakari monitor services will be installed on compute hosts only right. My question is how can we setup files under /opt/openstack-ansible/inventory/env.d/ so that the services will install on compute hosts. How to setup containers there.07:19
*** cjloader has quit IRC07:21
evrardjpnsingh: if you are configuring a static inventory.ini you shouldn't worry07:21
evrardjpabout conf.d/env.d07:22
evrardjpbut I think you're mistaken again07:22
evrardjpI know you want to work on the integration of masakari07:22
evrardjpbut the first step, as we discussed already, is making sure the role test is fine07:22
evrardjpthe role test is far simpler07:22
evrardjpdid you read the documentation I sent you?07:23
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_glance master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56609307:26
nsinghyes. i gone through that.07:29
evrardjpok let me introduce the base jobs, so that we can start patching the role07:30
*** klamath has quit IRC07:30
evrardjpnsingh: so you mean running, on a new clean machine, ./run_tests.sh functional deploys fine?07:31
nsinghevrardjp: i didn't run ./run_tests.sh on a clean machine.07:38
nsinghi will do that.07:38
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: [Docs] Clarify the testing page  https://review.openstack.org/56622707:38
evrardjpit's on the page I gave you :)07:38
nsinghyes.07:38
evrardjprun a clean machine, git clone openstack-ansible-os_masakari, and then run all the tests there07:38
evrardjplinting, functional.07:39
evrardjpvery separate things07:39
evrardjpbecause that's what will be tested by gates07:39
evrardjpwe basically have two levels: One to make sure the role itself works, and one to integrate it with the rest in a flexible way07:39
nsinghok.07:40
*** gkadam has joined #openstack-ansible07:41
*** markvoelker has quit IRC07:42
nsinghevardjp: sorry but where to clone openstack-ansible-os_masakari.07:43
nsinghis it means that i need to add masakari role under /et/ansible/roles/ and run the test07:45
*** kukacz has quit IRC07:46
*** tosky has joined #openstack-ansible07:48
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible stable/pike: Bump lxc_host role  https://review.openstack.org/56622907:49
evrardjpnsingh: if you have a really new machine you don't have all of that :)07:50
evrardjpso you just git clone it07:50
evrardjpanywhere07:50
evrardjpI do it in /opt/ or in my /home/user/ folder07:50
evrardjpthen run the bash script07:50
evrardjpsimple as that07:50
*** gkadam has quit IRC07:52
evrardjpandymccr: hey, do you remember when we discussed with ttx about delaying all the milestones of two weeks because we are cycle-trailing?07:52
*** gkadam has joined #openstack-ansible07:52
evrardjpI think it was done about during Pike time07:52
*** cjloader has joined #openstack-ansible07:52
*** kukacz_ has joined #openstack-ansible07:55
*** cjloader has quit IRC07:57
*** robert___ has joined #openstack-ansible08:00
*** DanyC has joined #openstack-ansible08:00
*** kukacz_ has quit IRC08:01
*** kukacz_ has joined #openstack-ansible08:01
*** DanyC has quit IRC08:04
*** kukacz_ has quit IRC08:07
*** kukacz_ has joined #openstack-ansible08:11
*** kukacz_ has quit IRC08:14
*** kukacz_ has joined #openstack-ansible08:14
*** vnogin has joined #openstack-ansible08:17
*** DanyC has joined #openstack-ansible08:17
*** lirt has joined #openstack-ansible08:22
lirtHello guys, can somebody give a little time for this issue https://bugs.launchpad.net/openstack-ansible/+bug/1752540? I try to find out what is problem with that, but unfortunately I am not able to troubleshoot it.08:24
openstackLaunchpad bug 1752540 in openstack-ansible "os_nova cell_v2 discover failure" [Undecided,In progress] - Assigned to git-harry (git-harry)08:24
*** robert___ has quit IRC08:25
*** vnogin has quit IRC08:30
*** markvoelker has joined #openstack-ansible08:39
openstackgerritfupingxie proposed openstack/openstack-ansible-os_congress stable/queens: Do not log passwords  https://review.openstack.org/56624008:42
*** gkadam has quit IRC08:42
TahvokHey guys!08:42
TahvokI've just found a regression with my latest patch that was merged08:43
Tahvokhttps://review.openstack.org/#/c/566119/08:43
TahvokFirst, with this patch, the version should always be checked, even when rabbitmq_upgrade is set to True08:44
TahvokSecondly, even if this is fixed, rabbitmq will still fail, as for some reason, the same stop procedure is running in the playbook itself as well (as I've just found out):08:44
*** lbragstad has quit IRC08:45
Tahvokhttps://github.com/openstack/openstack-ansible/blob/master/playbooks/rabbitmq-install.yml#L3908:45
*** lbragstad has joined #openstack-ansible08:45
TahvokI could create a fast review to remove this stop tasks, the question is, why is it there?08:46
openstackgerritAlbert Mikaelyan proposed openstack/openstack-ansible-rabbitmq_server master: Always check for rabbitmq version  https://review.openstack.org/56624308:54
hwoaranghello. friday again so the usual weekly ping for the distro packages blueprint reviews https://review.openstack.org/#/q/status:open+branch:master+topic:bp/openstack-distribution-packages08:55
hwoarangwe now have glance into the mix08:55
evrardjpwow that's getting traction08:58
evrardjpI was busy reviewing some of those earlier today08:58
evrardjp:)08:58
evrardjpthanks for the work hwoarang08:58
openstackgerritAlbert Mikaelyan proposed openstack/openstack-ansible-rabbitmq_server master: Always check for rabbitmq version  https://review.openstack.org/56624308:58
hwoarangno problem i want to get at least one of the roles in so we have a point of reference08:59
hwoarangfor the implementation08:59
* hwoarang is moving to cinder08:59
evrardjphwoarang: do you mind editing this: https://review.openstack.org/#/c/562607/6 ?09:03
evrardjpor I can do it09:03
hwoarangi dont understand all the comments to be honest09:08
hwoarangso if you want to edit it please go ahead :)09:10
*** markvoelker has quit IRC09:12
evrardjpI think it helps reading the commit message. I was confused at first. :)09:16
evrardjpok cool09:16
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone master: Do not pip install keystoneclient on the host  https://review.openstack.org/56260709:21
evrardjphwoarang: reapplied votes ^ if you don't like the commit message, please -1.09:21
evrardjp-w*09:21
hwoarangyeah should be ok09:23
hwoarangi also think that virtualenv can be removed too09:23
hwoarangbecause it's being installed by pip_install09:24
hwoarangbut lets do that later on09:24
evrardjpyeah that's a fair point09:24
evrardjpor remove it from the pip_install :p09:24
hwoarangi deliberately put it there because it's a common dep on all roles09:24
evrardjppip_install will be close to an empty shell09:24
evrardjpit's fine for now09:25
evrardjpit's clear09:25
hwoarangyep09:25
evrardjpwe can slowly phase that out09:25
evrardjpI have on my todolist to use SC to make sure everyone is using a recent enough version of pip/setuptools/virtualenv/wheel from packages09:25
evrardjpso we'd never need anything pip installed on the host.09:26
* hwoarang gives evrardjp a belgian chocolate to move it higher up in the todo list09:26
evrardjpinventory still has precedence09:26
evrardjpbut I can move that above 18.0409:26
evrardjpabove "use tempest venv for resource creation"09:27
evrardjp:)09:27
evrardjphwoarang: if you could vote on https://review.openstack.org/#/c/566229/09:27
evrardjpand https://review.openstack.org/#/c/565029/09:27
evrardjpthat would make the gates less red.09:28
*** udesale_ has joined #openstack-ansible09:29
evrardjphwoarang: https://review.openstack.org/#/c/557896/ is also something we could bring in for more reliability. As you can see it works by extending the delays, but some delays are sometimes not good enough.09:31
*** udesale__ has joined #openstack-ansible09:31
hwoarangyep on it09:31
evrardjpWe still have a race condition to fix that causes cinder-backup to consume 100% cpu. That would be SUPER NICE if someone could work on it, right d34dh0r53 ? :p09:31
evrardjphwoarang: thanks man09:31
*** udesale has quit IRC09:32
*** udesale_ has quit IRC09:34
*** blinkiz has quit IRC09:35
evrardjpwho has seen arrested development here?09:36
TahvokIs it possible to revert a change?09:36
evrardjpyes09:36
evrardjpTahvok: click on revert :p09:36
evrardjpbut what's the issue?09:36
hwoarangah these clicky clicky git UI things...09:37
evrardjpgit revert works too :p09:37
hwoaranggit revert <sha> && git review09:37
evrardjpbetter:09:37
evrardjpgit checkout -b revert_topic; git revert <sha> ; git review -f09:37
evrardjpworks on fish!09:37
evrardjpif you want same "successs" behavior, add "and" or replace ; with && when using bash!09:38
evrardjpfish is great! and there are plenty of fish in the C09:39
evrardjp(OMG I am seriously lacking some sleep)09:39
hwoaranglol09:39
hwoarangevrardjp: how can i convince you to get the tempest https://review.openstack.org/#/c/562606/ thing in? it's a dependency for all the distro work09:41
Tahvokevrardjp: do you see my messages an hour ago?09:43
TahvokI can paste them here again..09:44
evrardjpTahvok: I will read them, no need to repaste. I might have missed them, yes :p09:44
evrardjphwoarang: you just convinced me, if it's required and I have no alternative, there is no way to block this.09:45
evrardjpit's not bad, but it's not good either :p I have to tackle this when I can09:45
*** foutatoro has joined #openstack-ansible09:46
evrardjpbut lower in my todo list, we just discussed this :)09:47
mmaHi, just noticed that keystone_ssl_protocol defaults to "{{ ssl_protocol | default('ALL -SSLv2 -SSLv3') }}".  If I check nginx docs at "http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols" there doesn't seem to be any support for "ALL", also the SSLvX shouldn't include a leading '-' character.   When I tried to use 'keystone_ssl: True' this resulted in an nginx error 'nginx: [warn] invalid value "ALL"'.   Easy enough09:48
mma for me to just override the default keystone_ssl_protocol so that is fine. Just curious if this is something that should be changed?09:48
mmaOf if it is just me doing something wrong :)09:48
evrardjpTahvok: that's very old.09:49
evrardjpThe playbook I mean09:49
evrardjpfor me I am fine with a later patch to remove remnants09:50
TahvokI just wanted to make sure before submitting a review...09:50
evrardjpgo ahead. If you think it's worth it, let's do it09:50
TahvokIt's a dependency actually. If the patch of the role merges before the playbook, the role will fail when running with rabbitmq_upgrade09:51
foutatorohi all, I get this error while running the setup-hosts but the /etc/resolv.conf already exists in the host09:51
foutatorofatal: [infra]: FAILED! => {"changed": false, "cmd": ["chroot", "/var/lib/lxc/LXC_NAME/rootfs", "/usr/local/bin/cache-prep-commands.sh"], "delta": "0:00:00.142970", "end": "2018-05-04 11:25:55.207465", "failed": true, "rc": 1, "start": "2018-05-04 11:25:55.064495", "stderr": "+ mkdir -p /etc/ansible/facts.d/\n+ '[' -a /etc/resolv.conf ']'\n+ echo 'nameserver 10.0.3.1'\n/usr/local/bin/cache-prep-commands.sh: line 8: /et09:51
evrardjpmma: you shouldn't use SSLv2 SSLv309:51
foutatorowhat could be the cause of the error ?09:51
evrardjpmma: you can override keystone_ssl_protocol with what you want that's nginx valid09:52
evrardjpI don't know nginx, so you have to check their docs09:52
evrardjpfoutatoro: sadly you're not alone.09:52
evrardjpthe lxc images have changed.09:52
evrardjpso we are adapting there.09:52
evrardjpwe have patches pending09:53
evrardjpfoutatoro: sorry for the inconvenience09:53
evrardjpsee https://bugs.launchpad.net/openstack-ansible/+bug/176859209:53
openstackLaunchpad bug 1768592 in openstack-ansible "/usr/local/bin/cache-prep-commands.sh failing to write to /etc/resolv.conf when resolvconf used on Xenial" [Undecided,New]09:53
*** klamath has joined #openstack-ansible09:54
foutatoroevrardjp: thanks for this information09:54
foutatoroIs this only for ocata release ?09:54
hwoarangfoutatoro: all releases are affected09:55
evrardjpwe are using the same images in all our branches.09:56
evrardjpso we've changed master, queens is bumping shas at the moment, same for Pike. Ocata didn't get the first patch to lxc_hosts yet, so we'd need a bump of the role afterwards.09:56
*** klamath has quit IRC09:59
odyssey4mewell, that's nice - the ocata one is failing due to some openssl issue... I think we fixed that in later branches10:01
ArchiFleKsHi, I have some issues on master, apparently repo build is trying to acess a local repository (/var/www/repo) to locally clone ceilometer repo, but this repo is not normally cloned (skipped by ansibe when cloning the upstream repo) because I do not use ceilometer, but requierement still appear in os-release folder10:02
odyssey4meperhaps set the job to -nv for now, find the other patch to backport?10:02
odyssey4meArchiFleKs argh, that might be one of the repositories pulling in bad requirements10:02
odyssey4mewe've frozen some specifically for that reason10:02
*** hamza21 has joined #openstack-ansible10:03
openstackgerritAlbert Mikaelyan proposed openstack/openstack-ansible master: Rabbitmq during upgrade is stop already in role  https://review.openstack.org/56626910:03
odyssey4mefor example: https://github.com/openstack/openstack-ansible/commit/d2e1065e5b7277cbae895a359bc4085462c5122c#diff-470e013a5a7dbed983e7e29788d3fd8110:03
ArchiFleKsodyssey4me: thanks, i'll have a look, do you have a bug or an idea or where that might be happening ? You mean another project specifying ceilometer as a requierement ?10:03
*** armaan has joined #openstack-ansible10:04
odyssey4meArchiFleKs see the note in the patch, it points to the problem10:04
odyssey4meand yes, the upstream projects have done some rather silly requirements specs10:04
openstackgerritAlbert Mikaelyan proposed openstack/openstack-ansible-rabbitmq_server master: Always check for rabbitmq version  https://review.openstack.org/56624310:06
openstackgerritAlbert Mikaelyan proposed openstack/openstack-ansible master: Rabbitmq during upgrade is stopped already in role  https://review.openstack.org/56626910:08
evrardjpodyssey4me: sorry, I didn't get the chance to fix that too...10:08
evrardjpadding this one that disappeared from todolist10:08
*** markvoelker has joined #openstack-ansible10:08
TahvokPlease review this 2: https://review.openstack.org/#/c/566269/ and https://review.openstack.org/#/c/566243/10:09
TahvokThis is important as it fixes regression mentioned by Mohammed here: https://review.openstack.org/#/c/566119/10:10
odyssey4meevrardjp if you can explain the problem and the suggested solution to ArchiFleKs then perhaps he can do the implementation in the projects :)10:10
evrardjptha's fair10:11
evrardjpI don't have much to explain, it's case by case and explained in the commits10:12
ArchiFleKs  odyssey4me I think it is the same issue you described10:12
ArchiFleKssource branch updater must have updated odl10:12
*** Taseer has joined #openstack-ansible10:12
odyssey4meArchiFleKs yes, it will do that10:12
ArchiFleKsI'll check and revert the SHA1 to the one you pinned10:12
ArchiFleKsshould be good10:12
evrardjpArchiFleKs: check bgpvpn too10:12
odyssey4methe issue is that they've added requirements which are direct git SHA's for things that are actually test requirements, not real requirements10:13
odyssey4mein some cases they might be real requirements, but they should be optional10:13
*** udesale_ has joined #openstack-ansible10:13
evrardjpwhether its tests or real requirements (for example bgpvpn), they should be surgical10:13
evrardjpodyssey4me: yes exactly. Faster to type it!10:13
evrardjpodyssey4me: :)10:13
odyssey4meso ideally we need to work with the upstream projects to change them to be specified as extras, so the requirement can be something like 'foo[bar]' if you want support for bar included10:14
*** udesale__ has quit IRC10:16
olivierb-morning everyone10:17
ArchiFleKsI see, thanks for the input evrardjp odyssey4me10:17
olivierb-evrardjp odyssey4me , concerning the issue with ocata backport https://review.openstack.org/#/c/566054/ I am wondering if there are some missing backports to ocata branch in openstack-ansible-pip_install ?10:18
olivierb-just a guess as I am not at all familiar with all these10:18
odyssey4meas far as I remember, centos on ocata is broken anyway - trying to unwind it to make it all work right is not going to be easy given all the hcanges that were made in pike to get it right10:20
odyssey4mein ocata we still used yum, in pike we switched to dnf10:21
olivierb-ok I see, no pb10:22
odyssey4mehmm, wait a minute10:22
odyssey4mehttps://bugs.launchpad.net/openstack-ansible/+bug/170849310:22
openstackLaunchpad bug 1708493 in openstack-ansible "Bindep files expect python2-pyOpenSSL to be present" [High,Fix released] - Assigned to Major Hayden (rackerhacker)10:22
odyssey4meyep, that fix went into pike but not ocata10:23
odyssey4melemme do a port quick10:23
olivierb-sure thanks10:23
odyssey4mehmm, it appears the problem package doesn't get used by ocata through bindep10:24
odyssey4meso that's not exactly it10:24
*** radeks has joined #openstack-ansible10:25
*** ethfci has joined #openstack-ansible10:27
ethfciHello, I have the following problem since today:10:28
ethfciTASK [lxc_hosts : Ensure that the LXC cache has been prepared] *****************10:28
ethfciFriday 04 May 2018  09:59:39 +0000 (0:00:00.351)       0:09:38.572 ************10:28
ethfcifatal: [infra1]: FAILED! => {"ansible_job_id": "430350509737.8837", "attempts": 1, "changed": true, "cmd": "chroot /var/lib/machines/ubuntu-xenial-amd64 /usr/local/bin/cache-prep-commands.sh > /var/log/lxc-cache-prep-commands.log 2>&1", "delta": "0:00:00.028542", "end": "2018-05-04 09:59:37.935611", "failed": true, "finished": 1, "msg": "non-zero return code", "rc": 1, "start": "2018-05-04 09:59:37.907069", "stderr10:28
ethfci": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}10:28
ethfcifatal: [log1]: FAILED! => {"ansible_job_id": "369551530620.8473", "attempts": 1, "changed": true, "cmd": "chroot /var/lib/machines/ubuntu-xenial-amd64 /usr/local/bin/cache-prep-commands.sh > /var/log/lxc-cache-prep-commands.log 2>&1", "delta": "0:00:00.022634", "end": "2018-05-04 09:59:38.412639", "failed": true, "finished": 1, "msg": "non-zero return code", "rc": 1, "start": "2018-05-04 09:59:38.390005", "stderr":10:28
ethfci "", "stderr_lines": [], "stdout": "", "stdout_lines": []}10:28
ethfcion stable/queens10:28
odyssey4meolivierb- it looks like https://review.openstack.org/502489 is the thing which changed things up significantly to resolve this issue10:29
openstackgerritMerged openstack/openstack-ansible-os_masakari master: Updated from OpenStack Ansible Tests  https://review.openstack.org/56600710:30
*** vnogin has joined #openstack-ansible10:30
olivierb-Indeed, seems like it, does this mean that it should be backported to ocata branch ?10:30
*** radeks has quit IRC10:32
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-pip_install stable/ocata: Don't install any packages via pip  https://review.openstack.org/56627810:34
*** vnogin has quit IRC10:35
odyssey4meolivierb- it's a fairly significant change to backport - I hope there's no other fall out... but it's either this or removing centos support10:37
odyssey4meevrardjp I think https://review.openstack.org/566278 might be needed to get the lxc_hosts change for ocata passing10:38
evrardjpif you remove centos support, please update the meta10:38
evrardjpethfci: yes we are on it10:38
evrardjpa new patch should land very quick10:38
odyssey4meremoving centos support would require removal across all roles, and I don't have time to execute that right now10:39
evrardjpmaybe just mark it nv if this one hurts more than fixes?10:39
evrardjplet's see how this bp part goes10:40
odyssey4mewell, if lxc_hosts won't even build for centos - then everything is broken :p10:40
evrardjpfair fair :)10:40
odyssey4meby the way - perhaps it'd be good to add a reno about this issue, and share the workaround which can be implemented for earlier releases?10:40
evrardjpwell today I saw orange in gates everywhere10:40
odyssey4meI can put something together now10:40
evrardjpnot really encouraging isn't it? :p10:41
evrardjpodyssey4me: oh I didn't think of that10:41
evrardjpadding resolvers manually or something?10:41
odyssey4melemme put one together for each branch10:41
odyssey4meI think you can just add this to user_variables.yml: lxc_cache_prep_pre_commands: rm -f /etc/resolv.conf10:42
evrardjpbetter you than me at writing english, indeed.10:42
odyssey4megiven that's what we do now with https://review.openstack.org/#/c/566046/1/vars/redhat-7.yml10:42
evrardjpisn't the fault due to no resolv.conf being there?10:42
evrardjpoh10:42
*** markvoelker has quit IRC10:42
odyssey4meonce the role SHA's merge, are you going to rush a release?10:43
ethfciresolv.conf is auto put by libc!s resolver10:43
evrardjptoday I can't odyssey4me . But yes I'd like to do so.10:43
evrardjpI will probably only get the time to work on this on Sunday evening, for personal reasons.10:43
evrardjpbut that's still acceptable.10:44
evrardjpif a reno is published10:44
odyssey4meethfci if you add this to your user_variables.yml file, then retry your build, it should work: lxc_cache_prep_pre_commands: "rm /etc/resolv.conf || true"10:44
odyssey4meyeah, that's fine - the release won't action until next week anyway10:44
evrardjpyeah10:44
ethfcithanks guys so much10:44
evrardjpbut we need many of those in for sunday, which I can't drive10:45
odyssey4meethfci could you try that please to confirm for me while I prepare a release note to advise10:45
evrardjpI think queens is on its way10:45
evrardjpPike too10:45
ethfcioke give me 2 hours10:45
evrardjpbut O and N aren't10:45
evrardjpnot that N matters, as N should be EOL.10:45
odyssey4meI can do a reno for N, but that's all - all roles are EOL10:46
evrardjpMaybe I should re-ping tonyb :)10:46
odyssey4meI'll work on prepping a patch to switch master to using diskimage-builder on Monday. This kind of stuff is getting old.10:48
odyssey4meIt's time we took control.10:48
evrardjpthat's a big step.10:48
evrardjpI understand, but I also see the risk of maintaining this.10:49
evrardjpI know it's not recommended to use infra images, but it's SO tempting.10:50
evrardjpanyway, I am fine with that.10:51
evrardjppython build can be delayed a little more10:51
odyssey4mewell, I'm not sure exactly what you mean by 'use infra images' - if you mean we add the code to produce out images, then use that to publish our own images... then perhaps we can do that to help ci builds go faster... but there are no existing images we can use in openstack-infra at this point10:52
evrardjpodyssey4me: slightly related question: do you think that the process to build images with dib could be extended for operators to manage their clouds' glance images?10:54
odyssey4meyes10:54
*** epalper has quit IRC10:54
evrardjpin other words: We have a process, and we output rootfs for lxc/nspawn + something for glance10:55
evrardjpbecause if images can be built in a CI way, it's definitely positive for cloud operators10:55
odyssey4meI won't target that to start with, but it can be extended to do that.10:55
evrardjpbecause that's a good operational story.10:56
*** spsurya has quit IRC10:56
evrardjp"we have a process to ensure you have rotating, up to date, glance images"10:56
odyssey4meyeah, perhaps I'll add a user story to the TODO to make use of diskimage-builder for image building and publishing into glance.10:56
evrardjpI think it can be even further than a user story10:56
evrardjpbe part of the operations guide.10:57
evrardjpbut that's maybe later, as first it could be a user story10:57
evrardjpbut that's very long term10:57
ethfciodyssey4me:  your idea's checking on its way10:58
evrardjpethfci: thanks.10:58
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/queens: Add release note for resolvconf cache prep failure  https://review.openstack.org/56628710:59
evrardjpethfci: please review the release note odyssey4me just published here ^10:59
odyssey4methank ethfci - if you can confirm that it makes things work then I'll port that back to each stable branch10:59
ethfciodyssey4me i will vote on your review okay?11:06
odyssey4meethfci yes, perfect thank you11:09
*** cjloader has joined #openstack-ansible11:12
*** dave-mccowan has joined #openstack-ansible11:14
evrardjpcores, could you vote on https://review.openstack.org/#/c/566278/1 please?11:14
odyssey4medo we have a https://review.openstack.org/566229 for queens?11:15
odyssey4meI see that https://review.openstack.org/565933 has merged, so unless I'm missing something the integrated sha bump is missing11:15
*** cjloader has quit IRC11:17
evrardjpodyssey4me: yes, the sha bump of next queens didn't merge yet11:18
evrardjpodyssey4me: https://review.openstack.org/#/c/565029/11:18
evrardjpit's checking right now11:18
odyssey4meevrardjp ah I see - and the patch for lxc_hosts is in that a-r-r update?11:18
evrardjpyes11:19
openstackgerritAndy McCrae proposed openstack/ansible-config_template master: Allow top section in ini to be specified  https://review.openstack.org/56629211:19
evrardjpfree!11:19
odyssey4meok, it might have been nice to mark the related bug in the commit msg - but meh11:19
evrardjpyeah I thought of that ... then... well it's already in :p11:21
*** cjloader has joined #openstack-ansible11:21
*** udesale__ has joined #openstack-ansible11:22
*** udesale__ has quit IRC11:22
*** udesale_ has quit IRC11:24
*** cjloader has quit IRC11:26
*** pcaruana has quit IRC11:27
*** jwitko has quit IRC11:36
*** markvoelker has joined #openstack-ansible11:39
*** pcaruana has joined #openstack-ansible11:39
*** nicolasbock has joined #openstack-ansible11:42
*** foutatoro has quit IRC11:53
*** vnogin has joined #openstack-ansible11:54
*** klamath has joined #openstack-ansible11:55
*** vnogin has quit IRC11:56
*** pcaruana has quit IRC11:59
*** klamath has quit IRC12:00
*** gkadam has joined #openstack-ansible12:09
*** pcaruana has joined #openstack-ansible12:12
odyssey4meethfci has your test passed the lxc_hosts execution stage yet?12:12
*** markvoelker has quit IRC12:12
odyssey4melol, I see you just reviewed - excellent, thanks!12:12
ethfciodyssey4me yes, voted on your review :D12:13
*** cjloader has joined #openstack-ansible12:13
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/pike: Add release note for resolvconf cache prep failure  https://review.openstack.org/56629812:14
mgariepymorning everyone12:15
odyssey4meo/ mgariepy how're things?12:17
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add option to change fs type on bootstrap device  https://review.openstack.org/56629912:17
*** cjloader has quit IRC12:17
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Factorize code for better readbility  https://review.openstack.org/56630012:18
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Add release note for resolvconf cache prep failure  https://review.openstack.org/56630112:19
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add more meaningful/user readable failure  https://review.openstack.org/56630212:19
mnasermorning folks12:20
*** ethfci has quit IRC12:21
odyssey4meo/ mnaser12:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/newton: Add release note for resolvconf cache prep failure  https://review.openstack.org/56630412:23
*** gkadam has quit IRC12:24
*** markvoelker has joined #openstack-ansible12:24
odyssey4mecores, if we could get https://review.openstack.org/#/q/I7549e6710727d71f05dbc4082f543536280e9d85 reviewed asap so that it's published soon, that'd be swell - this issue is hitting a lot of people, so the sooner we provide the workaround, the better12:24
*** electrofelix has quit IRC12:26
nsinghi ran ./run_tests for masakari. but it is failing for  "Could not find a version that satisfies the requirement pbr===4.0.2" and i also check for other roles like nova, cinder. these are also failing for the same.12:27
openstackgerritMerged openstack/openstack-ansible-pip_install stable/ocata: Don't install any packages via pip  https://review.openstack.org/56627812:27
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add more meaningful/user readable failure  https://review.openstack.org/56630212:28
mgariepyodyssey4me, reviewed. lgtm12:30
odyssey4methx mgariepy12:30
mgariepything are not too bad, i have enough project to keep me busy ... haha12:31
odyssey4mensingh hmm, that's odd - can you paste a complete output to where it fails?12:31
mgariepyhow about you ?12:31
openstackgerritMerged openstack/openstack-ansible-os_nova master: Define lxd.pool in nova.conf based on lxd_storage_pool  https://review.openstack.org/56589112:31
odyssey4meyeah, my day job's keeping me busy - building out nodepool infrastructure so that we use it for all our jenkins testing12:32
mnaserodyssey4me: lgtm12:34
mnaserodyssey4me: sorry, had to abandon/restore to get it out of ci to verify something first - https://review.openstack.org/#/c/566304/12:37
mnaserthe change https://review.openstack.org/#/q/I3769053956b958a0ac7cab499ea90af2a40de850 never went to stable/newton12:37
mnaserdo i understand that the workaround doesnt dpened on that change?12:37
*** cmart has joined #openstack-ansible12:38
*** armaan has quit IRC12:38
odyssey4memnaser yep, that's why the workaround in the release note says to apply to all newton releases12:38
mnaserodyssey4me: ok, thats what i thought12:38
odyssey4methere's no dependency12:38
*** armaan has joined #openstack-ansible12:38
odyssey4methee newton roles are EOL, so the only option for a deployer is to fork and apply the patch to the role - or apply the workaround12:38
mnaseroh i see12:40
odyssey4methe newton integrated repo should also be eol by now, but I guess the release team is busy - so I pushed the additional reno as it may be handy for someone to reference12:41
mnasermaybe if evrardjp is around he can give a poke at #openstack-release12:42
odyssey4meyeah, it's on his TODO list and he pokes tonyb from time to time12:43
evrardjp[m]ok12:43
*** hamza21 has quit IRC12:44
nsinghodyssey4me: http://paste.openstack.org/show/720363/12:44
odyssey4mensingh ah, I see the issue - your host is configured to use the repo server for some reason... role tests run against pypi directly, and won't work in an integrated build setupp12:45
odyssey4methe repo server doesn't have that package12:46
*** geb has quit IRC12:47
nsinghodyssey4m: ooh so how can i fix this.12:48
odyssey4mensingh remove /root/.pip/pip.conf - or use a clean host12:50
*** geb has joined #openstack-ansible12:51
*** hamza21 has joined #openstack-ansible12:53
*** udesale has joined #openstack-ansible12:54
nsinghodyessey4me: it works :)12:57
odyssey4mehwoarang evrardjp[m] we discovered the other day that pip_install is never run in the role tests unless the role test specifically does it, right? would there be any issues running the role in https://github.com/openstack/openstack-ansible-tests/blob/master/test-setup-host.yml so that it's almost universally executed?12:57
hwoarangodyssey4me: i reverted the patch and now pip_install is executed on openstack_hosts as before12:58
odyssey4mehwoarang huh?12:58
hwoarangodyssey4me: https://review.openstack.org/#/c/565873/12:59
odyssey4meoh, we do it for centos - but we use packages for opensuse/ubuntu, right?12:59
hwoarangis that what you mean?13:00
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/ocata: Fix lxc cache prep resolvers  https://review.openstack.org/56605413:00
odyssey4mehwoarang oh, so now we're installing the same packages in openstack_hosts and in pip_install13:01
odyssey4meoh, looks like we aren't13:01
hwoarangthey should be similar13:02
odyssey4mewe just skip the get-pip stuff in pip_install now because openstack_hosts has already put the packages there13:02
hwoarangget-pip only happens on centos13:02
hwoarangbecause it comes with such an old pip13:02
hwoarangubuntu also needs setuptools from pip because i said yesterday the setuptools from ubuntu splits pkg-resources to a separate package, so using 'virtualenv' from distro with our index-url pointing to the repo-build or openstack-ci mirror does not have pkg-resources there and pip fails13:04
odyssey4meah, so that was the issue - awesome, thanks for figuring that out!13:04
hwoarangit's not easy to explain all i can do is to point you at this http://logs.openstack.org/06/562606/12/check/openstack-ansible-functional-ubuntu-xenial/de2aedd/job-output.txt.gz#_2018-05-02_11_04_29_83135913:05
hwoarangyou see a 404 http error there basically saying that pkg-resources is missing from our index13:05
odyssey4mehwoarang I guess that opensuse doesn't auto-start nginx if I install the package... much like centos - only ubuntu does that, right?13:05
hwoarangyep13:05
odyssey4meyeah, I saw that issue some time ago, but didn't get time to dig into it - I'm grateful that you have managed to!13:06
odyssey4meok, so https://review.openstack.org/565873 is moving along now and should merge in a bit13:06
odyssey4mewith that I can do my revisions to https://review.openstack.org/564778 with the assumption that openstack_hosts is taking care of pip/virtualenv correctly for each distro13:07
hwoarangright13:07
evrardjpthat would be the plan13:08
evrardjpopenstack_hosts is doing what's right all accross the board13:08
odyssey4meevrardjp https://review.openstack.org/566054 is now merged, so we can do an integrated build patch to bring that and https://review.openstack.org/566278 in which seems necessary13:11
evrardjpI have to go for today, but I can help with the reviews on the way13:11
evrardjpcool it passed13:11
odyssey4meok, lemme push a patch up now then13:11
evrardjpthanks13:12
evrardjpif you ping me I will review in the train.13:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible stable/ocata: Update lxc_host/pip_install role SHA's  https://review.openstack.org/56630913:15
odyssey4meevrardjp ^ done13:15
odyssey4mecores - please track and babysit https://review.openstack.org/#/q/I8523c34af069d097c9ffb46cbc9a16f87cc84fb1 and https://review.openstack.org/565029 which need to merge asap to get a release out early next week which solves the resolvconf related cache prep failure for new builds13:16
*** vnogin has joined #openstack-ansible13:17
openstackgerritMerged openstack/openstack-ansible stable/pike: Bump lxc_host role  https://review.openstack.org/56622913:17
openstackgerritMerged openstack/openstack-ansible stable/queens: Add release note for resolvconf cache prep failure  https://review.openstack.org/56628713:17
openstackgerritMerged openstack/openstack-ansible stable/pike: Add release note for resolvconf cache prep failure  https://review.openstack.org/56629813:17
openstackgerritMerged openstack/openstack-ansible stable/ocata: Add release note for resolvconf cache prep failure  https://review.openstack.org/56630113:17
openstackgerritMerged openstack/openstack-ansible stable/newton: Add release note for resolvconf cache prep failure  https://review.openstack.org/56630413:17
odyssey4meheh, ok one done :)13:17
hwoarangevrardjp: btw re https://review.openstack.org/#/c/562606/ the experimental job fails on repo-build prob due to an unrelated issue http://logs.openstack.org/06/562606/16/experimental/openstack-ansible-integrated-deploy-aio/4840096/logs/openstack/aio1_repo_container-1fd5c0fd/repo/wheel_build.log13:22
*** klamath has joined #openstack-ansible13:22
*** dxiri_ has quit IRC13:23
odyssey4mehwoarang argh, that looks painful13:25
hwoarangyeah can't decipher it yet13:26
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: defaults: Allow uwsgi to autoload required plugins.  https://review.openstack.org/56631413:26
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56631513:26
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Revise the role to properly cater to use-cases  https://review.openstack.org/56477813:27
*** esberglu has joined #openstack-ansible13:28
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: task: main: Run the pip_install role on all distros  https://review.openstack.org/56587313:31
evrardjp[m]hwoarang: do you have the requirements file for that build ?13:37
d34dh0r53anyone seeing repo-build only putting wheels in one container?  third mnaio I've build and /var/www/repo/pools is empty on infra1 and infra2 repo containers. (stable/queens)13:39
d34dh0r53*built13:39
*** esberglu has quit IRC13:39
*** esberglu has joined #openstack-ansible13:39
d34dh0r53evrardjp: I may be able to look at that today but my bucket is rather full right now, and now I can't even get a mnaio to build properly :/13:41
*** vnogin has quit IRC13:43
evrardjp[m]check the rsyncd13:44
*** mma has quit IRC13:50
*** mma has joined #openstack-ansible13:51
*** armaan has quit IRC13:52
odyssey4med34dh0r53 nope, lsync is supposed to push the content to the other repo containers13:54
odyssey4melsync executes rsync13:54
*** cjloader has joined #openstack-ansible13:55
d34dh0r53k, rsync is running but nothing in the logs, looking at lsync now13:55
odyssey4meit's been a long time since any of that changed - so maybe lsync, rsync or something in openssh changed :/13:55
odyssey4meit's plausible that lsync changed in some way that breaks our lua script13:56
hwoarangevrardjp: prob not. we do not seem to collect such info on the logs13:56
d34dh0r53odyssey4me: so this https://github.com/openstack/openstack-ansible-repo_build/blob/stable/queens/tasks/repo_package_sync.yml is outdated?13:57
odyssey4med34dh0r53 That's for pulling multi-arch changes from secondary repo hosts back to the master for redistribution from there - so that is unlikely to be executing unless you have a multi-arch/multi-distro environment.13:58
d34dh0r53ahh, ok13:58
odyssey4methis is the lua script: https://github.com/openstack/openstack-ansible-repo_server/blob/master/templates/lsyncd.lua.j213:59
d34dh0r53odyssey4me: is there an easy way for me to manually test the lua script?13:59
*** cjloader has quit IRC13:59
odyssey4methese are the tasks setting up the sync management: https://github.com/openstack/openstack-ansible-repo_server/blob/master/tasks/repo_sync_manager.yml13:59
*** mma has quit IRC13:59
odyssey4med34dh0r53 change something in one of the folders under management, I guess?13:59
d34dh0r53I can't force a sync?14:00
odyssey4meThat stuff hasn't changed all that much since it was initially built in kilo - I think we did some small changes in liberty to take the secondary repo servers offline wwhile syncing14:00
odyssey4med34dh0r53 no idea14:00
d34dh0r53yeah, it's really weird, this was working fine 2 days ago14:01
odyssey4meI've never executed a multi-node build, so I've never touched any of that.14:01
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Revise the role to properly cater to use-cases  https://review.openstack.org/56477814:02
evrardjp[m]nope we do not14:08
*** armaan has joined #openstack-ansible14:08
evrardjp[m]it was if you had a host handy with those.14:08
evrardjp[m]systemctl restart lsyncd.service ?14:09
odyssey4meI don't think that'll do anything. IIRC lsync keeps a cache of checksums, and reacts to file changes. restarting the service won't likely do a thing.14:10
d34dh0r53yeah, it didn't seem to do much14:10
*** evin has quit IRC14:12
*** cjloader has joined #openstack-ansible14:13
*** kstev has joined #openstack-ansible14:14
odyssey4med34dh0r53 I guess you have an opportunity now to become the expert on lsyncd. ;)14:15
d34dh0r53lol, yay!14:15
*** cjloader has quit IRC14:17
*** hamza21 has quit IRC14:19
*** pylot_ has quit IRC14:22
*** vnogin has joined #openstack-ansible14:22
*** pylot has joined #openstack-ansible14:24
idlemindso to get my cloud back-online (stable/pike) i had to manually copy the $NOVA_HOME/.ssh/authorized_users from compute nodes to the conductor containers ... the "Perform cell_v2 discovery task" would then pass successfully on the compute nodes ... however the os-nova.yml play would remove the authorized_keys file from the conductor containers so now subsequent runs fail ... is this a known bug w/pike-osa?14:29
idlemindre-word 1: should the "perform cell_2 discovery" task run on compute nodes and result in ssh'ing to a (or possibly all) conductor containers?14:30
idlemindre-word 2: if 1 is true, shouldn't the nova-key-distribution mechanism add / maintain the "authorized_keys" file on the conductor containers then?14:31
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Revise the role to properly cater to use-cases  https://review.openstack.org/56477814:31
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584514:32
odyssey4meidlemind this patch fixed an issue recently where the dns name was used in appropriately: https://github.com/openstack/openstack-ansible-os_nova/commit/aa5446fd26b542937b7a4ed64188281c3321fe2c14:33
odyssey4methat was introduced by https://github.com/openstack/openstack-ansible-os_nova/commit/c581c2af7b2bfdf60fb4467d7d5b17bed32fc85f14:33
idlemindodyssey4me ahh ok so that could explain why some runs i was seeing 1 conductor container and others it was a different one14:34
idlemindlooks like that was pulled in on apr 12 to stable/pike14:35
idlemindso i should be able to grab that14:35
odyssey4methe keys are dropped in this: https://github.com/openstack/openstack-ansible-os_nova/blob/stable/pike/tasks/nova_compute_key_distribute.yml14:35
odyssey4mewhich uses https://github.com/openstack/openstack-ansible-os_nova/blob/stable/pike/templates/nova-key-insert.sh.j2 - that relies on the fact cache being up to date for *all* nova hosts, otherwise things will go missing14:36
idlemindso could you verify for me if the conductor containers are supposed to get the authorized keys? it seems like they'd be needed at least on conductor[0] to ensure that the ssh into it works for cell_v2 discovery14:36
idlemindoh so it's possibly something is up w/my fact caches? should that be something i can force an update on?14:37
odyssey4meI don't know whether conductors need the keys - I think only the computes do, because the keys are used for live migrations IIRC...14:37
odyssey4methe delegation should be handled by ansible, and be using ansible's keys - not nova's keys14:37
idlemindodyssey4me ya that's what i had thought but w/o the authorized_keys file on the conductors when "perform cell_v2 discovery" runs on a compute node it errors out saying it can't ssh into the conductor14:37
odyssey4meI suspect that's because of the bug that was fixed.14:39
idlemindso i should grab at least those commits mentioned if not just bring my stable/pike up to date and re-run14:39
*** cjloader has joined #openstack-ansible14:40
idlemindcool cool it'd be nice to get back on solid footing lol fought w/that little guy for a few days14:40
odyssey4meidlemind probably better to bring pike up to day as a whole14:41
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_glance master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56609314:41
odyssey4me*date14:41
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_glance master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56609314:42
idlemindnow to get cisco's fmc / ftd boxes to boot on openstack ... their quick-start has instructions but they seem to to be failing atm14:42
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56631514:43
openstackgerritOlivier Bourdon proposed openstack/openstack-ansible master: Add more meaningful/user readable failure  https://review.openstack.org/56630214:43
*** armaan has quit IRC14:44
*** armaan has joined #openstack-ansible14:45
*** spine55 has quit IRC14:47
*** vnogin has quit IRC14:49
*** weezS has joined #openstack-ansible14:52
*** spine55 has joined #openstack-ansible14:54
*** mma has joined #openstack-ansible14:55
*** kstev1 has joined #openstack-ansible14:56
*** kstev has quit IRC14:57
*** mma has quit IRC15:00
*** armaan has quit IRC15:02
*** armaan has joined #openstack-ansible15:02
odyssey4mehwoarang on opensuse, what's the default documentroot for a fresh nginx install15:07
odyssey4memnaser any idea what it is for centos?15:08
hwoaranglets see15:08
hwoarangodyssey4me: /srv/www/htdocs/15:09
odyssey4meah, awesome, thanks15:09
hwoarangi assume that documentroot is 'root   /srv/www/htdocs/;'15:09
odyssey4mecentos appears to use /usr/share/nginx/html/15:10
odyssey4meI guess it's designed to have you override that to something else15:10
odyssey4meugh, trying to do something simple and it ends up getting messy15:13
weezSits life15:13
*** pcaruana has quit IRC15:13
* mnaser looks15:15
mnaserodyssey4me: oh you already have your answer15:15
mnasersorry i was writing up something and didnt get back quickly15:15
*** dxiri has joined #openstack-ansible15:18
*** cjloader has quit IRC15:19
odyssey4mehwoarang what's the ansible_distribution value for opensuse?15:19
*** cjloader has joined #openstack-ansible15:20
*** dave-mccowan has quit IRC15:20
odyssey4meapologies, I'm not able to build opensuse instances in the cloud I use for testing :/15:21
odyssey4meactually, never mind - I can just use else - no need for a conditional15:21
hwoarangno problem15:21
hwoarangti's actually  'opeSUSE Leap'15:22
hwoarangbut these changes between suse versions (or ansible versions) so i normally use ansible_pkg_mgr to capture all suse releases ;p15:22
d34dh0r53evrardjp: when are you next bumping SHAs for stable/queens?15:26
*** nicolasbock has quit IRC15:26
*** dave-mccowan has joined #openstack-ansible15:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Revise the role to properly cater to use-cases  https://review.openstack.org/56477815:28
odyssey4med34dh0r53 there's already a patch in to do so - it failed gate earlier and is in recheck15:29
odyssey4mehttps://review.openstack.org/56502915:30
d34dh0r53tys15:30
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Add IPv6 kernel module  https://review.openstack.org/56594015:31
*** cjloader has quit IRC15:34
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56631515:38
*** nicolasbock has joined #openstack-ansible15:40
odyssey4meoh bother, there's no systemd-resolved in the base image... I think those lxC_hosts changes to fix the issue might be bad patches15:48
odyssey4medoes anyone know where I can find dates for package releases for ubuntu?15:48
*** armaan has quit IRC15:49
*** armaan has joined #openstack-ansible15:49
jrosserodyssey4me: you can do that on packages.ubuntu.com15:49
jrosserhttps://packages.ubuntu.com/artful/apt <- for example there is a link to the changelog on there15:50
odyssey4mehmm, am I missing something here? https://packages.ubuntu.com/xenial-updates/bash15:50
odyssey4meah, changelog - I see it15:50
*** kstev has joined #openstack-ansible15:56
*** kstev1 has quit IRC15:59
openstackgerritAndy McCrae proposed openstack/ansible-config_template master: Allow default section in ini to be specified  https://review.openstack.org/56629216:00
*** gyee has joined #openstack-ansible16:00
odyssey4mehmm, so no new bash then16:04
odyssey4meodd16:04
odyssey4methe workaround does seem to work for me, as does the patch16:04
*** hamza21 has joined #openstack-ansible16:08
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-os_cinder master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56631516:08
*** EmilienM is now known as EvilienM16:09
*** armaan has quit IRC16:11
*** armaan has joined #openstack-ansible16:11
*** lirt has quit IRC16:12
*** kyblik has joined #openstack-ansible16:12
kyblikhi. any idea how to configure OSA  to use totally different IP to connect via ssh to host than defined in https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.test.example ?16:14
*** cjloader has joined #openstack-ansible16:20
*** cjloader has quit IRC16:20
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-ops master: Add a playbook to set local facts on newton redeploy  https://review.openstack.org/56636016:20
*** cjloader has joined #openstack-ansible16:21
odyssey4melooking for another review of https://review.openstack.org/565999 from the cores please16:23
*** radeks has joined #openstack-ansible16:29
cloudnulld34dh0r53: any anyone else, mind having a look at https://review.openstack.org/#/c/565896/16:30
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Provide an example for switch port configurations  https://review.openstack.org/56612016:31
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Convert rsyslog to an include_task with group_vars  https://review.openstack.org/55600216:38
openstackgerritMerged openstack/openstack-ansible stable/ocata: Update lxc_host/pip_install role SHA's  https://review.openstack.org/56630916:38
*** radeks has quit IRC16:43
*** armaan has quit IRC16:45
odyssey4mecloudnull want to tweak that little thing I commented on - otherwise your next patch will be another mixup :p16:45
*** udesale has quit IRC16:50
odyssey4memeh, on its way16:50
*** jra has joined #openstack-ansible16:51
*** cmart has quit IRC16:55
openstackgerritMerged openstack/openstack-ansible-ops master: Correct cluster properties  https://review.openstack.org/56589616:55
*** armaan has joined #openstack-ansible16:55
*** kstev1 has joined #openstack-ansible16:56
*** kstev has quit IRC16:57
jraI'm trying to have all syslog output from all OSA-managed containers and container hosts sent to my upstream syslog aggregator. The containers can be configured to send some logs to a user-defined location, but only local7.* are included; and the container hosts themselves don't seem to be configurable this way at all. How should I go about this?16:59
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/ansible-role-python_venv_build master: Revise the role to properly cater to use-cases  https://review.openstack.org/56477817:04
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584517:04
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584517:05
*** cmart has joined #openstack-ansible17:10
jraI could submit changes for review that would either remove or make configurable the syslog facility filter, and extend the same remote logging pattern to the container hosts as well; would those changes be consistent with the goals of the project?17:12
odyssey4mejra there is already the capability to configure rsyslog to go to a sinle rsyslog host... or to configure it to go wherever you want17:13
jraYes, but as above: only for the containers, and only for local7.*17:14
odyssey4meif you have a log host in the inventory, it'll get done automagically for you - but if it's a host managed by something else, then just add something like this: https://github.com/openstack/openstack-ansible-rsyslog_client/blob/master/defaults/main.yml#L66-L8317:14
odyssey4mejra are you working with master, or a stable branch?17:15
jraStable, 16.0.1017:15
jraBut this behaviour appears in master17:16
jrahttps://github.com/openstack/openstack-ansible-rsyslog_client/blob/master/templates/remote-logging.j2#L3417:16
odyssey4mehmm, I don't totally understand how it's all done - it's been a long time since I worked with it - but IIRC there are services set to log locally, then everything is piped through one facility to the remote host17:17
*** esberglu has quit IRC17:17
jraThat's true for openstack services, that's why local7 is sufficient for them17:17
jrabut that doesn't capture other system logs17:17
odyssey4mehmm, ok - well I do expect that anyone using this will want more funnelled through too - so yeah, that would fit the project I guess17:18
jraOkay, I'll file a bug and start working on a changeset for this17:18
odyssey4mein master, though the containers now journal straight to the host - then the hosts push to the remote journal server17:19
jraas in systemd journal?17:19
odyssey4meyup17:19
jrawhere's the bit that pushes the journal data to the remote server?17:19
odyssey4melooking for it now17:19
jrathat might be entirely sufficient17:19
odyssey4mefar more efficient that rsyslog that way17:20
odyssey4methere's also a bunch of work in the ops repo to implement the elastic stack for log shipping and analysis17:20
*** AR2018 has joined #openstack-ansible17:20
jraI have the benefit of a fairly mature log management environment in my organization, so would like to take advantage of it, but it's nice to know that there's some focus being put on log management in the OS community17:21
odyssey4mejra https://review.openstack.org/55598217:21
jraThat looks super promising!17:22
odyssey4methere's another patch in flight to switch rsyslog off https://review.openstack.org/55600217:22
jraSo will a change that's in master now make it into a Queens release?17:23
odyssey4methat relies on some work done in the lxc hosts and containers roles, and those changes were significant and scattered... so no, that is not going to be backported17:23
odyssey4meit's not worth destablizing17:24
jraSeems reasonable17:24
jraThose changes tell me that my proposed changes wouldn't fit with the project's direction; no point updating rsyslog's behaviour if it's going away anyway17:24
*** kyblik has quit IRC17:24
jraI'll create a local overlay to handle this in our environment17:24
odyssey4meyou could, of course, fork and give it a go yourself17:24
jraWe're pretty focused on trying to get a new cloud deployment out the door, so I don't think I can put that time in right now17:25
odyssey4meja, understood17:25
jraThanks for your help and advice on this17:25
cloudnullodyssey4me: sorry was not paying attention17:26
cloudnullwhich on e?17:26
jraI'm going to be attending the OSA onboarding at Summit in Vancouver this month, hopefully I can learn a bit about where the project is going and see where I can be helpful in offering changes17:26
*** kstev has joined #openstack-ansible17:26
odyssey4mesure thing, no problem at all - you're welcome to pop patches up if it'll help reduce your maintenance going forward - given opensuse doesn't have the remote journaling functionality, it still needs to use rsyslog, so it'll still be handy17:26
*** tosky has quit IRC17:27
cloudnulljra: awesome ! i'll look forward to seeing you there :)17:27
odyssey4memore help is always good, especially from operators :)17:27
*** kstev1 has quit IRC17:27
cloudnull++17:27
odyssey4meanyway, I gotta run - have a great day!17:28
cloudnullodyssey4me: what should I change ?17:28
odyssey4mecloudnull it merged long ago :p17:29
cloudnulloh.17:29
cloudnullok. never mind :)17:29
* cloudnull winning17:29
cloudnullin that case, have a wonderful day :)17:29
*** tosky has joined #openstack-ansible17:30
cloudnulljra: I've done a mess of work with rsyslog and the journald things, if you have any questions don't hesitate to reach out17:32
openstackgerritMerged openstack/openstack-ansible-os_tempest stable/queens: Install os-testr  https://review.openstack.org/56599917:36
jra@cloudnull: thanks!17:40
*** ppetit has quit IRC17:41
*** evin has joined #openstack-ansible17:52
*** pcaruana has joined #openstack-ansible17:54
*** kstev1 has joined #openstack-ansible17:57
*** kstev has quit IRC17:59
*** jra has quit IRC18:07
*** DanyC has quit IRC18:13
*** DanyC has joined #openstack-ansible18:13
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: [WIP] Adds certificate generation  https://review.openstack.org/56584518:16
*** DanyC has quit IRC18:18
*** klamath has quit IRC18:49
*** klamath has joined #openstack-ansible18:50
*** cmart has quit IRC18:52
TahvokI would like to have your opinion on this: https://review.openstack.org/#/c/566269/219:06
*** pcaruana has quit IRC19:10
dmsimardcloudnull, odyssey4me: it was one of you two that told me about unreliability or performance things in 'ara-report', this should now be fixed -- let me know if you notice anything odd19:14
odyssey4medmsimard yeah, it was doing 500's earlier - thanks for solving that! I was a little lost without ARA. :p19:22
odyssey4metrawling console logs is so old school19:22
*** radeks has joined #openstack-ansible19:23
*** cmart has joined #openstack-ansible19:26
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639119:26
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639119:31
*** radeks has quit IRC19:33
*** radeks has joined #openstack-ansible19:33
openstackgerritMerged openstack/openstack-ansible stable/queens: Update all SHAs for 17.0.4  https://review.openstack.org/56502919:34
*** DanyC has joined #openstack-ansible19:38
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-haproxy_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639419:39
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-haproxy_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639419:42
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639119:43
rschulmanI'm trying to create my own AIO (rather than using the built in one) so I know how it works and I can expand it later. Running setup-hosts is complaining, however, that infra1 and compute1 have the same IP addresses.19:50
cloudnullrschulman: in the openstack_user_config file the host names need to be the same if the ip is the same19:50
rschulmanahh, ok19:51
rschulmanso I need to put everything on infra1 for now.19:51
cloudnullnow these are not the physical host name, its the ansible inventory host name19:51
cloudnullyes.19:51
rschulmanGot it, thank you.19:52
cloudnullanytime19:53
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds certificate generation  https://review.openstack.org/56584520:03
*** bgmccollum_ is now known as bgmccollum20:08
rschulmanRunning `openstack-ansible setup-hosts.yml` the script fails on "Ensure LXC cache has been prepared". The log files indicate that cache-prep-commands.sh failed because `/etc/resolv.conf` doesn't exist.20:14
rschulmanI'm not seeing a similar bug in Google. Anyone have thoughts on what's going wrong there?20:14
shananigansrschulman: https://bugs.launchpad.net/openstack-ansible/+bug/176859220:20
openstackLaunchpad bug 1768592 in openstack-ansible "/usr/local/bin/cache-prep-commands.sh failing to write to /etc/resolv.conf when resolvconf used on Xenial" [Critical,Fix committed]20:20
shananigansI just tried the workaround and it didn't work.  It got past the cache-prep-commands.sh part, but failed later on the repo server as /etc/resolv.conf didn't exist at all.20:21
*** armaan has quit IRC20:23
*** armaan has joined #openstack-ansible20:23
rschulmanshananigans: Ahh, ok, thanks. I'll track that bug.20:23
odyssey4meshananigans hmm, that's troubling20:28
odyssey4meI suspect that we should actually not remove the file - I noticed that the file check didn't work, so perhaps that file check should rather be fixed.20:29
odyssey4meshananigans were you doing that on newton, or later?20:30
shananigansnewton20:30
shananiganswas failing on pike, so went back to a known working(or so i thought)  This was before I saw the bug report.20:30
odyssey4meok, it's late for me right now so if you're able to do some tests and put info in the bug or submit a changed approach review that'd be awesome20:31
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639120:31
odyssey4mein the image that comes down, it has resolvconf installed - so there's a symlink on /etc/resolv.conf which points at /run/...20:32
odyssey4mein the chroot, obviously, /run doesn't exist - so the file check here doesn't work: https://github.com/openstack/openstack-ansible-lxc_hosts/blob/newton-eol/vars/ubuntu-16.04.yml#L59-L6120:32
odyssey4mehowever, using 'if -h' works.. and should allow the symlink to be moved aside, and moved back later if that file test is also fixed20:33
odyssey4meso, perhaps the right workaround is this20:34
shananigansIf I get to the root of it and its not something stupid I'm doing, I'll update with the details.20:34
odyssey4mecheck for the file in the pre commands using the right check and move it to some other name, then revert the name in the post commands20:35
shananigansThis round I'm adding the link back in with the post to see if it helps.20:36
shananigansjust waiting on it to spin up.20:36
odyssey4mehmm, that said the changes that went in does place a resolv.conf there: https://github.com/openstack/openstack-ansible-lxc_hosts/commit/e77c3a923bc8aae4a264917f592b58b5d1c79aed20:36
odyssey4meoh of course - the workaround doesn't have that part20:36
odyssey4meperhaps the workaround should include using this in the post commands: echo "nameserver {{ lxc_net_address }}" > /etc/resolv.conf20:37
odyssey4meThanks for digging into it. I trust you'll find a solution and am keen to see what it is.20:38
*** radeks has quit IRC20:45
*** mbuil has quit IRC21:11
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639121:15
*** hamza21 has quit IRC21:18
*** dave-mccowan has quit IRC21:19
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-galera_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56640821:36
*** kstev1 has quit IRC21:47
*** DanyC has quit IRC21:49
*** brad[] has quit IRC21:50
*** hamzy_ has joined #openstack-ansible21:51
*** hamzy has quit IRC21:54
*** AR2018 has quit IRC21:55
*** kstev has joined #openstack-ansible22:02
*** kstev1 has joined #openstack-ansible22:04
*** kstev has quit IRC22:06
*** weezS has quit IRC22:06
*** AR2018 has joined #openstack-ansible22:16
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible-rabbitmq_server master: Convert self-signed SSL to use the openssl modules  https://review.openstack.org/56639122:16
*** evin has quit IRC22:17
*** AR2018 has quit IRC22:19
*** AR2018 has joined #openstack-ansible22:24
*** markvoelker has quit IRC22:29
*** AR2018 has quit IRC22:29
*** AR2018 has joined #openstack-ansible22:30
*** brad[] has joined #openstack-ansible22:33
*** AR2018 has quit IRC22:34
*** kstev1 has quit IRC22:53
*** cmart has quit IRC23:32
*** cjloader has quit IRC23:35
*** dxiri has quit IRC23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!