Friday, 2022-09-16

*** ysandeep|out is now known as ysandeep01:35
*** ysandeep is now known as ysandeep|afk04:05
*** ysandeep|afk is now known as ysandeep06:37
noonedeadpunkspatel I do07:13
noonedeadpunkCan try answering some questions  :)07:13
*** frenzyfriday is now known as frenzyfriday|doc11:05
*** dviroel|out is now known as dviroel11:23
*** frenzyfriday|doc is now known as frenzyfriday11:56
jamesdentonnoonedeadpunk is GlusterFS a thing for Glance in addition to Repo? Or is it not advisable?12:46
noonedeadpunkI'd say it can be an option, yes12:57
noonedeadpunkIn case you don't have swift or ceph12:58
jamesdentonright, ok12:58
noonedeadpunkTHough I've heard that under load gluster is not that great12:58
jamesdentonwas thinking the same, especially for poc/lab12:58
noonedeadpunkyeah, for poc/lab should be fine12:58
opendevreviewJames Denton proposed openstack/openstack-ansible master: Fix serialized playbook runs  https://review.opendev.org/c/openstack/openstack-ansible/+/75204013:49
noonedeadpunkjamesdenton: that is suuuuper tricky one ^14:02
noonedeadpunk(not saying it wrong)14:02
noonedeadpunkor well, it is, but current behaviour is not proper as well14:03
jamesdentonunderstood, just getting it current before giving it a go14:05
*** ysandeep is now known as ysandeep|away15:02
*** dviroel is now known as dviroel|lunch15:07
opendevreviewMerged openstack/openstack-ansible-os_keystone stable/wallaby: Rename TLSv1.0 to TLSv1 in apache config  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/85775115:32
opendevreviewMerged openstack/openstack-ansible-os_keystone stable/xena: Rename TLSv1.0 to TLSv1 in apache config  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/85774915:39
*** dviroel|lunch is now known as dviroel16:07
jamesdentonnoonedeadpunk noticing something in a multi-node deploy: https://paste.opendev.org/show/b67i57HhscRTGeHbrSkb/. Seems keystone has not been re-enabled in haproxy before an attempt is made to check if the service is up via the VIP. 16:49
jamesdentonat that point in time, only the first keystone service is being configured16:50
jamesdentonLooks like this change, https://github.com/openstack/openstack-ansible-os_keystone/commit/05c64f7651a93bfa987a939fce680c3d4b13df30, conflicts with this as a post_task: https://github.com/openstack/openstack-ansible/blob/master/playbooks/os-keystone-install.yml#L9817:30
*** dviroel is now known as dviroel|afk17:50
*** dviroel|afk is now known as dviroel18:33
mgariepyjamesdenton, are you around?19:05
jamesdentonyes19:05
mgariepyi'm playing with ovn a bit here but outside openstack19:05
mgariepyi did setup an lxd / ovn cluster over a couple machines.19:06
mgariepyfor some reason my external network is broken and i cannot find what is wrong on it lol19:06
jamesdentonhum19:06
mgariepyi have a linux bridge with the vlan with no IP. 19:07
jamesdentonok19:07
mgariepythe router and switch seems to have the ip correctly configured19:08
mgariepyhttps://paste.openstack.org/show/bSWBMCyAiowPqD4YSWwE/19:09
jamesdentonis there not still an OVS bridge with an interface connected?19:10
jamesdentonout of my element here19:10
mgariepyha ok ;)19:11
mgariepyi tough you were an ovn master :D19:11
mgariepyi'm not sure how to check if all the stuff is correctly configured.19:12
jamesdentonthat's spatel at this point?19:13
jamesdenton:)19:13
jamesdentonwhat does 'ovs-vsctl list open_vswitch' say?19:15
spatelhaha19:15
spatelso what the issue here? 19:16
mgariepyhttps://paste.openstack.org/show/blbCtabVsb0dedGatHNh/19:16
spatelnot able to ping outside? 19:16
mgariepyit was working.19:17
mgariepythen i did some stuff.. then it wasn't working.19:17
mgariepylol19:17
jamesdentonControl-Z, Control-Z, ad naseum19:17
mgariepythe ovn- nat isn't working.19:17
spatelyou are able to ping router ip from lxc container?19:17
mgariepyfrom inside, i can ping ccontainers to containers. internal router ip.19:18
mgariepybut not the nat one.19:18
mgariepyi guess i;ll have to build a new install and re-test it. at this point i have no idea what it's supposed to look like.19:19
spateldo you have static NAT like floating ip?19:20
mgariepyyes19:20
mgariepyin lxd it's all configured and in ovn i can see it. but it's like it's not connected to my ext bridge.19:20
spatelThis is how my static NAT looks - https://paste.opendev.org/show/bLMkAEhiaIllEp2ws1Xl/19:21
spatelhow is your ovs-vsctl show looks ?19:23
opendevreviewJames Denton proposed openstack/openstack-ansible-ops master: Add support for S3 backend  https://review.opendev.org/c/openstack/openstack-ansible-ops/+/85821119:23
spatelassuming its connected to external interface19:23
mgariepyhttps://paste.openstack.org/show/bSWBMCyAiowPqD4YSWwE/ my ovn-nbctl show here.19:24
mgariepysame as you beside the   gateway chassis: thing19:24
jamesdentonmgariepy and your ovs bridge 'lxdovn17' has a physical interface, right?19:26
jamesdentonand can you send 'ovn-nbctl list logical_router_port'?19:27
mgariepyhttps://paste.openstack.org/show/bzIq8yqLBY0y2loelGlE/19:27
jamesdentonwhat is lxdovn17b?19:28
mgariepythe interface in the lxb bridge 19:28
mgariepyhttps://paste.openstack.org/show/bZpTIwvgCr3Q1H28wKaQ/19:28
mgariepythat's fun lol19:29
jamesdentoncool, a veth or something?19:29
jamesdentoncan't say i've ever seen AAA.BBB.23.20/2419:30
mgariepyit's a public ip 19:30
spateli was about to ask or may be he hide it :)19:30
mgariepyedited by me.,19:30
jamesdentonoh ok lol19:30
mgariepylol19:30
jamesdentonDDoS in 3...2...1...19:30
mgariepyit's not responding anyway.. lol19:31
mgariepymaybe that's why haha19:31
spateltry ovs-tcpdump to sniff traffic on interface 19:32
jamesdentonovn-nbctl list logical_router_port lxd-net18-lr-lrp-ext19:34
jamesdentonnevermind19:34
mgariepytcpdump i see the traffic of the vlan19:35
mgariepyarp and stuff 19:35
spateltry ovn-trace to find where packet getting drop out - https://ervikrant06.github.io/ovn/openstack/OVN-openflow-trace/ 19:35
mgariepyso that part is working.19:35
mgariepyha nice.19:36
mgariepyi really thing the port is just not correcly configured on the cluster.19:36
spatelThis is good example - https://blog.russellbryant.net/2016/11/11/ovn-logical-flows-and-ovn-trace/19:36
spatelnow only ovn-trace can give you inside of flow.. otherwise everything looks good 19:38
mgariepythanks a lot for these. but i think i'll wait until next week to continue this 19:39
mgariepyis there any tooling to graph out the different switch and router in ovn ?19:40
spatelhow about this? - http://skydive.network/19:53
mgariepyi'll add that to my list of things to tests.20:00
spatelanyone using xrdp? 20:08
spatelfor Linux remote desktop 20:09
supamattI use remmina20:12
prometheanfire^20:20
prometheanfireare there any plans to use the new ceph provisioning tool (cephadm)?20:21
spatelI am seeing poor performance on xrdp20:21
spatelsupamatt 20:21
prometheanfireyo20:21
*** dviroel is now known as dviroel|pto20:37
*** tosky is now known as Guest76521:33
*** tosky_ is now known as tosky21:33

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!