Friday, 2020-05-01

*** gary_perkins has quit IRC01:28
*** gary_perkins has joined #openstack-ansible01:29
*** kberger_ has quit IRC01:51
*** KeithMnemonic has joined #openstack-ansible02:10
*** gyee has quit IRC02:47
*** rh-jelabarre has quit IRC03:12
*** evrardjp has quit IRC04:35
*** evrardjp has joined #openstack-ansible04:36
*** yolanda has quit IRC07:38
*** yolanda has joined #openstack-ansible07:51
*** pcaruana has quit IRC08:09
*** pcaruana has joined #openstack-ansible08:26
*** pcaruana has quit IRC08:44
*** pcaruana has joined #openstack-ansible08:44
*** gshippey has joined #openstack-ansible09:07
*** tosky has joined #openstack-ansible09:30
*** yolanda has quit IRC09:43
*** spatel has joined #openstack-ansible10:18
*** spatel has quit IRC10:23
*** andrelf has joined #openstack-ansible10:24
*** andrelf has quit IRC10:25
*** andrelf has joined #openstack-ansible10:27
*** andrelf has left #openstack-ansible10:27
*** andrelf has joined #openstack-ansible10:27
*** andrea15 has quit IRC10:46
andrelfhello. im trying to install a test environment with openstack ansible with 1 infra + 1 compute + 1 storage but for some reason a few a days the playbook setup-hosts.yml was failing in lxc_hosts : Format the machines sparse file but now its falling in lxc_hosts : Ensure that the LXC cache has been prepared when it trys to chroot11:05
andrelf/var/lib/machines/debian-10-amd64 /opt/cache-prep-commands.sh because it cant find the apt-listchnages inside the chroot. how can i find where in the tasks should the apt-listchanges been installed in chroot and it wasn't?11:05
jrosserandrelf: the debian container image contains the config file for apt-listchanges but not the package itself, so really the correct answer is to remove the config file, see this https://review.opendev.org/#/c/71888211:28
andrelfjrosser i was trying to research that problem and it seams that apt-listchanges is installed but it depends on python3 and not python2.7 when i prepared the target hosts like its reported here https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/targethosts.html11:36
andrelfand i will check your link thanks11:40
*** rh-jelabarre has joined #openstack-ansible11:56
*** rh-jelabarre has quit IRC11:56
*** rh-jelabarre has joined #openstack-ansible11:56
andrelfi don't know what what im doing wrong but in this doc https://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/targethosts.html you say that if i have the vg lxc it will be used intead of the /var/lib/lxc but what im seasing is that my /var is growing in space and no new logical volumes being created in lxc volume group. what im12:18
andrelfdoing wrong?12:18
noonedeadpunkandrelf: I think lxc_container_backing_store should be set to lvm in user_variables...12:25
noonedeadpunkCan you try this out?12:26
noonedeadpunk(Probably we need to update docs afterwards)12:26
andrelfatm i have my /var already at full 100% should i try to delete /var/lib/lxc folder and set that setting and try again?12:30
andrelfnoonedeadpunk12:30
noonedeadpunkandrelf: do you have your openstack running now? Or you're jsut in process of deploying it?12:32
andrelfnoonedeadpunk still in process of deploying it12:33
noonedeadpunkok, than you can probably remove created containers which will free up space in /var12:34
noonedeadpunkso run `openstack-ansible playbooks/containers-lxc-destroy.yml`12:35
andrelfoh ok thanks12:35
andrelfnoonedeadpunk now its creating the logical volumes thanks for the help. now lets wait and see whats the next task that fails hehhe12:40
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [doc] Adjust deploy-guide to install py3  https://review.opendev.org/72483612:54
noonedeadpunkandrelf: does https://review.opendev.org/#/c/724836/ look like reasonable fix of the doc?12:54
andrelfnoonedeadpunk regarding the docs yes, regarding the python3 i haven't tested regarding the apt-listchanges error above. what i have done was to add tthat specific task in https://review.opendev.org/#/c/718882 in the correspondent rule in my deployment host.13:14
*** itandops has quit IRC13:20
*** itandops has joined #openstack-ansible13:35
*** Dwane has joined #openstack-ansible13:37
*** Dwane has quit IRC13:43
mgariepyjrosser, are you using linux bridge ? or you are on a fancier tech ?13:45
*** schwicht has quit IRC13:46
*** schwicht has joined #openstack-ansible13:47
jrossermgariepy: still linuxbridge here13:49
mgariepyok13:49
jrosserI would like to spend time looking at ovs offload but always too much other stuff to do13:49
mgariepyin the past i had issue with ha routers so i disabled that, (recovery time was way too long to be useful)13:50
jrosserthat would be my motivation to move to ovs, not specifically for ovs for the sake of it but to leverage hardware acceleration13:50
mgariepyi wonder if there is an easy way to be ""seamless"" while reinstalling the network node. moving the router take a few sec (which i'm ok with) but when the resolver gets down it can be noticiable quite a lot until the dhcp agent returns.13:51
andrelfwhen trying to install openstack-ansible in a similar faction to this example https://docs.openstack.org/openstack-ansible/latest/user/test/example.html the VIP for external and internal comunication should be configured in /etc/network/interfaces in infra host or its configured by ansible to keepalive by default (Task "install keepalived" has been14:40
andrelfomitted)? I'm asking because in the task TASK [python_venv_build : Upgrade pip/setuptools/wheel to the versions we want] it seams to not be able to access to it.14:40
noonedeadpunkandrelf: so VIP is managed with keepalived14:45
noonedeadpunkYou should check that keepalived.conf has correct interfaces in it's conf14:46
andrelfin user_variables.yml settings?14:46
noonedeadpunk etc/keepalived/keepalived.conf on ctl hosts14:47
noonedeadpunkif they're not correct, you should adjust them in user_variables with haproxy_keepalived_external_interface and haproxy_keepalived_internal_interface14:49
andrelfbecause i want to test trying to add new infra host i suppose i should enable haproxy to use keepalvied also even it atm it only uses one ctl host right?14:49
andrelfok i will check them14:49
noonedeadpunkactually no, then you shouldn't use keepalived14:49
noonedeadpunkBut I gues then you need to manually add interfaces14:50
noonedeadpunk*manually add VIP14:50
andrelfso if i only have a ctl host i should many add the vip to interfaces host and only when trying to use multiple ctl hosts, enable keepalived and disable the manually add vip interface?14:51
noonedeadpunkYeah, I think that's the way15:04
noonedeadpunkOr you can actually try to force isntall it if you want...15:05
noonedeadpunknot not sure this has much sense eventually15:05
*** itandops has quit IRC15:12
*** itandops has joined #openstack-ansible15:13
andrelfok i have enabled the slave interfaces with internal and external vip and running openstack-ansible -vv setup-infrastructure.yml again15:18
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-lxc_hosts master: ensure 20listchanges is not in debian container  https://review.opendev.org/71888215:25
andrelfok now it seams that infra lxc container can't comunicate with infra-host despiste being in same linux bridge15:26
andrelfnow it works but still fails in TASK [python_venv_build : Upgrade pip/setuptools/wheel to the versions we want]...15:28
andrelfit seams haproxy is not runing... because i can access repo_all-back... lets see whats the problem with haproxy not starting then15:34
noonedeadpunkhm, actually not sure that haproxy is needed as well when having single node...15:36
andrelfits the default setting because i didn't change anything regarding haproxy. the problem in haproxy is because it cant bind socket to the internal and external vip (itried to configure 2 vip in the same network in br-mgmt).15:39
andrelfbut in your https://docs.openstack.org/openstack-ansible/latest/user/test/example.html you define .10 as internal vip and .11 ans external (being the host ip also in br-mgmt)15:41
jrosserandrelf: have you built an all-in-one yet?15:42
noonedeadpunkah, yeah, as you have lxc you eventually need haproxy15:43
*** gyee has joined #openstack-ansible15:43
noonedeadpunkSo binding on the same network should work, as haproxy binds to the IP and it shoudn't care on what network this ip is15:45
noonedeadpunkexcept smth else listening on the same port on that IP15:45
andrelfjrosser: nope  but i have read the documentation regarding it at time and it was decided to use the multi node setup because we wanted to add more resources15:49
jrosserandrelf: if you can make a virtual machine to run an AIO in then you will get an instant reference environment to look at when trying to debug your multinode deployment15:52
andrelfok now the haproxy bind all the sockets but it can comunicate with each backend... thats strange15:52
andrelfjrosser i understand but the parts that im having problems are the nones that supossy are diferent mainly networking. im now trying to troubleshot each lxc container and trying to understand with the service is not runing in each container15:54
*** schwicht has quit IRC15:58
*** lkoranda has joined #openstack-ansible16:07
*** evrardjp has quit IRC16:35
*** evrardjp has joined #openstack-ansible16:36
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-lxc_hosts master: ensure 20listchanges is not in debian container  https://review.opendev.org/71888216:58
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [doc] Adjust deploy-guide to install py3  https://review.opendev.org/72483617:02
openstackgerritDuncan Martin Walker proposed openstack/openstack-ansible-ops master: Add support for experimental Metricbeat service module  https://review.opendev.org/72489617:05
*** lkoranda has quit IRC17:09
*** gregwork has joined #openstack-ansible17:11
*** sri_ has joined #openstack-ansible17:44
sri_Hi team silly question , is it possible to deploy openstack without lxc containers using openstack-ansible ?17:46
jrossersri_: you can, but you will need more nodes, specifically your loadbalancer (haproxy) will need to be on dedicated nodes17:47
noonedeadpunkjrosser: I think we do have haproxy just on ctl nodes on metal deployments17:49
noonedeadpunksri_: it might be more hacky but generally it's possible I'd say17:49
jrosserah - what is is that can't work then, becasue we have to take haproxy and horizon away for metal aio17:50
jrosser(i think?)17:50
noonedeadpunkbut we did landed patch to make horizon listen on specific ip and alternate port (if provided)?17:51
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible-os_horizon/src/branch/master/defaults/main.yml#L407-L40917:51
sri_jrosser,  noonedeadpunk,   Ack, if that is case o-a supports  both Centos (rpm's)and ubuntu (deb)?17:52
jrosserwell thats a different question17:52
jrosserby default OSA installs openstack using source code17:52
jrosserthere is an option to use UCA or RDO deb/rpm but then imho you very much miss what is special / cool about OSA if you do that17:53
jrosserbut in terms of base OS you can use centos7, ubuntu 18.04, debian buster17:54
sri_jrosser: yes you're right, we are trying to deploy openstack without any containers (lxc,docker) just using string rpm's17:56
sri_jrosser: noonedeadpunk , Thanks's for the information :) I will try to find some doc's :)17:58
jrossersri_: you are stuck with what you are given if you deploy from rpms17:58
jrosserfor several years now i deploy openstack with OSA and all through that time i have had to apply patches to the upstream code17:59
jrosserto magnum / heat / keystone / horizon all at various times17:59
jrosserif you are investigating OSA as a deployment tool it is worth remebering that the thing it does best is deploy from source, becasue it puts in the hands of the deployer/operator *exactly* what code gets run18:00
sri_jrosser: understood, so can we build rpm's for sources ?18:01
jrosserOSA builds python wheels for the openstack services for particular git SHA and installed them into venv18:02
jrosserthey do not come from packages, normally18:02
jrosserthe versions of what gets installed are precisely defined for any particular release of OSA like this https://github.com/openstack/openstack-ansible/blob/master/playbooks/defaults/repo_packages/openstack_services.yml18:05
jrosserand because all of those are ansible variables you are free to override any of those versions or SHA yourself to patch / fix as you need18:05
sri_jrosser: awesome :) I will take look into it, again thank you so much for your time18:07
jrossersri_: i can give you a precise example, my deployments need a fix for horizon at the moment, which we fix with a patch on a fork on github https://github.com/bbc/horizon/commit/b4e2b2d137ad9cfb4bfe1203245d4ca7a54f5a8218:07
jrosserwe override the variables for the horizon repo to point to that repo and branch, and re-run the horizon playbook18:08
jrossernow we are running our fixed code, no need to build packages or do anything complex18:08
sri_cool, this looks very clean18:12
mgariepyhow often do you rebase your code @jrosser ?18:13
jrosserwe upgrade maybe once/twice a cycle18:14
mgariepyok18:15
jrosserand have to keep an accurate log of what we’ve forked and when everything we’ve fixed merges18:15
mgariepyyou are on train now ? or you lag behind a couple release ?18:15
mgariepyhow do you do that the log keeping ?18:16
jrosserso far we pretty much manage to get the local patching down to pretty much zero at the end of each cycle18:16
jrosserit’s a confluence page, nothing fancy18:16
mgariepythat's nice.18:17
andrelfok it seems that my previous errors were related to network issues in cables and linux bridge. im now recreating all containers and see if can already start galera service :D18:17
jrossercurrently we are on train, and put in enough effort in OSA that everything we care about is fixed/merged in n+118:17
jrosserif we didn’t do that I could easily see getting stuck on an old release18:18
mgariepydo you patch openstack project also ?18:18
mgariepyor having to try to keep the patch on divergent code. which is a pain.18:18
jrosservery small but yes, heat, magnum, and currently a couple of small things in horizon18:19
jrosser99% of our patches go into osa really18:19
mgariepyhow many ppl in your team ?18:19
jrossersort of 518:20
jrosserit’s a bit fluid though18:20
mgariepyok nice.18:20
jrosserbut we have to do everything, network, ceph, datacentre stuff18:20
mgariepyyeah18:21
mgariepydo you manage the ceph via osa ? or you are using something else ?18:22
jrosserwe use ceph-ansible standalone18:31
jrosserthat way we decouple upgrades of ceph from osa, and also the version of ansible ceph-ansible wants is contradicting the one osa wants quite often18:33
jrosserwe also have a relatively large radosgw setup which I wouldn’t want to have on the same endpoint / loadbalancer as openstack18:36
sri_jrosser: we are also do that same, it's always better run ceph as independent to openstack18:38
sri_jrosser: this looks like good point to start with. https://github.com/openstack/openstack-ansible/blob/b74ce951ffc202cd78cd49d1c59de8a5d431f718/etc/openstack_deploy/env.d/aio_metal.yml.example18:39
mgariepyjrosser, ok nice, i also moved away ceph deployment outside of osa into ceph-ansible,18:39
jrosserseems like a common pattern, we also moved our elk stack deploy from the openstack-ansible-ops repo out to be standalone18:44
jrosserbeing able to specify -i <osa_inventory> -i <ceph_inventory> on modern ansibles is very powerful18:45
*** gshippey has quit IRC19:29
*** KeithMnemonic has quit IRC19:39
andrelfjrosser and noonedeadpunk thanks for your help. i was finally able to finish the deployment and access the dashboard :D19:44
*** andrelf has quit IRC19:45
noonedeadpunkcool, nice to hear!19:47
redkriegI have recently changed from specifying my nova_nova_conf_overrides in a user_nova.yml file to using group_vars/[group]_hosts.yml.  I have the same settings in all of my groups, but a few hosts in one group aren't rendering any of the values specified there.  all the other hosts do.  is there a way for me to query what ansible thinks the value of nova_nova_conf_overrides is for a specific host20:28
redkriegand figure out where that came from?  grep turns up nothing20:28
*** itandops has quit IRC22:07
*** ansmith has quit IRC22:07
*** kopecmartin has quit IRC22:07
*** hamzy_ has quit IRC22:07
*** mmethot has quit IRC22:07
*** gouthamr has quit IRC22:07
*** evrardjp has quit IRC22:07
*** rh-jelabarre has quit IRC22:07
*** Jeffrey4l has quit IRC22:07
*** irclogbot_2 has quit IRC22:07
*** CeeMac has quit IRC22:07
*** admin0 has quit IRC22:07
*** waxfire has quit IRC22:07
*** Jeffrey4l has joined #openstack-ansible22:09
*** evrardjp has joined #openstack-ansible22:10
*** hamzy has joined #openstack-ansible22:10
*** mmethot has joined #openstack-ansible22:10
*** hamzy has quit IRC22:10
*** ansmith has joined #openstack-ansible22:10
*** irclogbot_3 has joined #openstack-ansible22:10
*** hamzy has joined #openstack-ansible22:11
*** gouthamr has joined #openstack-ansible22:11
*** CeeMac has joined #openstack-ansible22:13
*** tosky has quit IRC23:45
*** admin0 has joined #openstack-ansible23:59

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!