*** ysandeep|out is now known as ysandeep | 01:35 | |
*** ysandeep is now known as ysandeep|afk | 04:05 | |
*** ysandeep|afk is now known as ysandeep | 06:37 | |
noonedeadpunk | spatel I do | 07:13 |
---|---|---|
noonedeadpunk | Can try answering some questions :) | 07:13 |
*** frenzyfriday is now known as frenzyfriday|doc | 11:05 | |
*** dviroel|out is now known as dviroel | 11:23 | |
*** frenzyfriday|doc is now known as frenzyfriday | 11:56 | |
jamesdenton | noonedeadpunk is GlusterFS a thing for Glance in addition to Repo? Or is it not advisable? | 12:46 |
noonedeadpunk | I'd say it can be an option, yes | 12:57 |
noonedeadpunk | In case you don't have swift or ceph | 12:58 |
jamesdenton | right, ok | 12:58 |
noonedeadpunk | THough I've heard that under load gluster is not that great | 12:58 |
jamesdenton | was thinking the same, especially for poc/lab | 12:58 |
noonedeadpunk | yeah, for poc/lab should be fine | 12:58 |
opendevreview | James Denton proposed openstack/openstack-ansible master: Fix serialized playbook runs https://review.opendev.org/c/openstack/openstack-ansible/+/752040 | 13:49 |
noonedeadpunk | jamesdenton: that is suuuuper tricky one ^ | 14:02 |
noonedeadpunk | (not saying it wrong) | 14:02 |
noonedeadpunk | or well, it is, but current behaviour is not proper as well | 14:03 |
jamesdenton | understood, just getting it current before giving it a go | 14:05 |
*** ysandeep is now known as ysandeep|away | 15:02 | |
*** dviroel is now known as dviroel|lunch | 15:07 | |
opendevreview | Merged openstack/openstack-ansible-os_keystone stable/wallaby: Rename TLSv1.0 to TLSv1 in apache config https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/857751 | 15:32 |
opendevreview | Merged openstack/openstack-ansible-os_keystone stable/xena: Rename TLSv1.0 to TLSv1 in apache config https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/857749 | 15:39 |
*** dviroel|lunch is now known as dviroel | 16:07 | |
jamesdenton | noonedeadpunk noticing something in a multi-node deploy: https://paste.opendev.org/show/b67i57HhscRTGeHbrSkb/. Seems keystone has not been re-enabled in haproxy before an attempt is made to check if the service is up via the VIP. | 16:49 |
jamesdenton | at that point in time, only the first keystone service is being configured | 16:50 |
jamesdenton | Looks like this change, https://github.com/openstack/openstack-ansible-os_keystone/commit/05c64f7651a93bfa987a939fce680c3d4b13df30, conflicts with this as a post_task: https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-keystone-install.yml#L98 | 17:30 |
*** dviroel is now known as dviroel|afk | 17:50 | |
*** dviroel|afk is now known as dviroel | 18:33 | |
mgariepy | jamesdenton, are you around? | 19:05 |
jamesdenton | yes | 19:05 |
mgariepy | i'm playing with ovn a bit here but outside openstack | 19:05 |
mgariepy | i did setup an lxd / ovn cluster over a couple machines. | 19:06 |
mgariepy | for some reason my external network is broken and i cannot find what is wrong on it lol | 19:06 |
jamesdenton | hum | 19:06 |
mgariepy | i have a linux bridge with the vlan with no IP. | 19:07 |
jamesdenton | ok | 19:07 |
mgariepy | the router and switch seems to have the ip correctly configured | 19:08 |
mgariepy | https://paste.openstack.org/show/bSWBMCyAiowPqD4YSWwE/ | 19:09 |
jamesdenton | is there not still an OVS bridge with an interface connected? | 19:10 |
jamesdenton | out of my element here | 19:10 |
mgariepy | ha ok ;) | 19:11 |
mgariepy | i tough you were an ovn master :D | 19:11 |
mgariepy | i'm not sure how to check if all the stuff is correctly configured. | 19:12 |
jamesdenton | that's spatel at this point? | 19:13 |
jamesdenton | :) | 19:13 |
jamesdenton | what does 'ovs-vsctl list open_vswitch' say? | 19:15 |
spatel | haha | 19:15 |
spatel | so what the issue here? | 19:16 |
mgariepy | https://paste.openstack.org/show/blbCtabVsb0dedGatHNh/ | 19:16 |
spatel | not able to ping outside? | 19:16 |
mgariepy | it was working. | 19:17 |
mgariepy | then i did some stuff.. then it wasn't working. | 19:17 |
mgariepy | lol | 19:17 |
jamesdenton | Control-Z, Control-Z, ad naseum | 19:17 |
mgariepy | the ovn- nat isn't working. | 19:17 |
spatel | you are able to ping router ip from lxc container? | 19:17 |
mgariepy | from inside, i can ping ccontainers to containers. internal router ip. | 19:18 |
mgariepy | but not the nat one. | 19:18 |
mgariepy | i guess i;ll have to build a new install and re-test it. at this point i have no idea what it's supposed to look like. | 19:19 |
spatel | do you have static NAT like floating ip? | 19:20 |
mgariepy | yes | 19:20 |
mgariepy | in lxd it's all configured and in ovn i can see it. but it's like it's not connected to my ext bridge. | 19:20 |
spatel | This is how my static NAT looks - https://paste.opendev.org/show/bLMkAEhiaIllEp2ws1Xl/ | 19:21 |
spatel | how is your ovs-vsctl show looks ? | 19:23 |
opendevreview | James Denton proposed openstack/openstack-ansible-ops master: Add support for S3 backend https://review.opendev.org/c/openstack/openstack-ansible-ops/+/858211 | 19:23 |
spatel | assuming its connected to external interface | 19:23 |
mgariepy | https://paste.openstack.org/show/bSWBMCyAiowPqD4YSWwE/ my ovn-nbctl show here. | 19:24 |
mgariepy | same as you beside the gateway chassis: thing | 19:24 |
jamesdenton | mgariepy and your ovs bridge 'lxdovn17' has a physical interface, right? | 19:26 |
jamesdenton | and can you send 'ovn-nbctl list logical_router_port'? | 19:27 |
mgariepy | https://paste.openstack.org/show/bzIq8yqLBY0y2loelGlE/ | 19:27 |
jamesdenton | what is lxdovn17b? | 19:28 |
mgariepy | the interface in the lxb bridge | 19:28 |
mgariepy | https://paste.openstack.org/show/bZpTIwvgCr3Q1H28wKaQ/ | 19:28 |
mgariepy | that's fun lol | 19:29 |
jamesdenton | cool, a veth or something? | 19:29 |
jamesdenton | can't say i've ever seen AAA.BBB.23.20/24 | 19:30 |
mgariepy | it's a public ip | 19:30 |
spatel | i was about to ask or may be he hide it :) | 19:30 |
mgariepy | edited by me., | 19:30 |
jamesdenton | oh ok lol | 19:30 |
mgariepy | lol | 19:30 |
jamesdenton | DDoS in 3...2...1... | 19:30 |
mgariepy | it's not responding anyway.. lol | 19:31 |
mgariepy | maybe that's why haha | 19:31 |
spatel | try ovs-tcpdump to sniff traffic on interface | 19:32 |
jamesdenton | ovn-nbctl list logical_router_port lxd-net18-lr-lrp-ext | 19:34 |
jamesdenton | nevermind | 19:34 |
mgariepy | tcpdump i see the traffic of the vlan | 19:35 |
mgariepy | arp and stuff | 19:35 |
spatel | try ovn-trace to find where packet getting drop out - https://ervikrant06.github.io/ovn/openstack/OVN-openflow-trace/ | 19:35 |
mgariepy | so that part is working. | 19:35 |
mgariepy | ha nice. | 19:36 |
mgariepy | i really thing the port is just not correcly configured on the cluster. | 19:36 |
spatel | This is good example - https://blog.russellbryant.net/2016/11/11/ovn-logical-flows-and-ovn-trace/ | 19:36 |
spatel | now only ovn-trace can give you inside of flow.. otherwise everything looks good | 19:38 |
mgariepy | thanks a lot for these. but i think i'll wait until next week to continue this | 19:39 |
mgariepy | is there any tooling to graph out the different switch and router in ovn ? | 19:40 |
spatel | how about this? - http://skydive.network/ | 19:53 |
mgariepy | i'll add that to my list of things to tests. | 20:00 |
spatel | anyone using xrdp? | 20:08 |
spatel | for Linux remote desktop | 20:09 |
supamatt | I use remmina | 20:12 |
prometheanfire | ^ | 20:20 |
prometheanfire | are there any plans to use the new ceph provisioning tool (cephadm)? | 20:21 |
spatel | I am seeing poor performance on xrdp | 20:21 |
spatel | supamatt | 20:21 |
prometheanfire | yo | 20:21 |
*** dviroel is now known as dviroel|pto | 20:37 | |
*** tosky is now known as Guest765 | 21:33 | |
*** tosky_ is now known as tosky | 21:33 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!