Friday, 2023-04-07

opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985007:35
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985107:38
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985107:44
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973207:55
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_glance master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/87632808:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/87982908:31
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/87987008:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/87987009:50
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/87987009:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Ensure service is restarted on unit file changes  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/87987009:53
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Yoga upgrade jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/87988411:09
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Yoga upgrade jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/87988411:11
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ubuntu upgrade jobs to Jammy  https://review.opendev.org/c/openstack/openstack-ansible/+/87989011:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Yoga upgrade jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/87988411:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ubuntu upgrade jobs to Jammy  https://review.opendev.org/c/openstack/openstack-ansible/+/87989011:26
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ubuntu upgrade jobs to Jammy  https://review.opendev.org/c/openstack/openstack-ansible/+/87989011:29
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Yoga upgrade jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/87988411:45
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ubuntu upgrade jobs to Jammy  https://review.opendev.org/c/openstack/openstack-ansible/+/87989011:45
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Add Yoga upgrade jobs  https://review.opendev.org/c/openstack/openstack-ansible/+/87988411:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Switch ubuntu upgrade jobs to Jammy  https://review.opendev.org/c/openstack/openstack-ansible/+/87989011:54
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Implement separated haproxy service config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118912:17
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_adjutant master: Switch back to use constrained Django version  https://review.opendev.org/c/openstack/openstack-ansible-os_adjutant/+/87989212:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973212:54
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985113:27
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Drop `echo` from add-compute.sh script  https://review.opendev.org/c/openstack/openstack-ansible/+/87947613:30
noonedeadpunkdamn it, I really don't/can't reproduce the issue here https://zuul.opendev.org/t/openstack/build/71435e05755e4ef093aad31d8d64097c13:44
noonedeadpunkI can only assume that smth is weird going on with container image13:50
noonedeadpunkbut that won't make any sense, as all other tests rocky is passing13:51
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973213:53
noonedeadpunkjust in case stepca job is failing now quite reliably13:54
noonedeadpunkIe https://zuul.opendev.org/t/openstack/build/5dfbd2401aac4452a8042f295810a1ef13:54
noonedeadpunkwe also have a logical issue with upgrades from Z due to swtiching default of neutron driver...14:20
noonedeadpunkbasicaly due to https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/upgrade-utilities/define-neutron-plugin.yml#L3914:23
noonedeadpunksounds like my idea with simplifying run-uprade script won't work due to that :(14:27
noonedeadpunkas we need to apply upgrade scripts based on source release14:28
jrosserit's public holidays here till tuesday14:29
noonedeadpunkyeah... I know, it sometimes works jsut writing smth out to see that you're wrong :D14:29
jrosserwonder what happened to the stepca job14:30
noonedeadpunkit can be intermittent actually... As some jobs just passed14:31
noonedeadpunkhttps://zuul.opendev.org/t/openstack/build/44967b254ebc443e9ed293bcc234357914:31
noonedeadpunkso it's likely just some race condition14:31
noonedeadpunkso I see 2 failed and 3 passed right now in zuul14:32
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973214:45
noonedeadpunkAnd i really don't know what's wrong with ^ with gpg 14:48
noonedeadpunkon rocky metal14:48
noonedeadpunkwhile rocky lxc is just fine14:48
opendevreviewMerged openstack/openstack-ansible-ceph_client master: Remove functional tests  https://review.opendev.org/c/openstack/openstack-ansible-ceph_client/+/87920514:53
noonedeadpunkI wonder if I should try downloading it locally alike to mariadb... technically shouldn't matter...14:53
opendevreviewMerged openstack/openstack-ansible master: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87967114:56
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973215:16
noonedeadpunkfwiw - centos 9 metal jobs seems to be fixed now15:18
opendevreviewMerged openstack/openstack-ansible master: Use a map file to select haproxy horizon backend from the base frontend  https://review.opendev.org/c/openstack/openstack-ansible/+/87685115:29
noonedeadpunkSoooo... rocky claims on sha-1 key not being supported... But image has gnupg2-2.3.3-2.el9_0.x86_6416:04
noonedeadpunkwtf https://paste.openstack.org/show/beRFJTVnrgJ3TX4IZdPJ/16:06
noonedeadpunkNeilHanlon: just in case pinging you ^ as I'm o_O16:08
NeilHanlonawtf16:12
NeilHanlonso the rocky gpg keys I know have only sha256 hashes (for 9)16:13
NeilHanlonnot seeing any SHA1 algos on the rabbitmq key either16:14
NeilHanlonhm... noonedeadpunk: EL8 packages on an EL9 system?16:18
noonedeadpunkYeah... That's "as designed". RabbitMQ folks said they don't care and just use el816:18
NeilHanlonbut also have a an empty repo for 9.. confusing 🙃16:19
noonedeadpunkInterestingly, that I can reproduce issue only in dib-builded image, not my local one16:19
noonedeadpunkI can place your key there if you're up to poke around it :)16:20
noonedeadpunkNeilHanlon: https://paste.openstack.org/show/blnxkTXLPDlNRkOfBtsK/16:25
NeilHanlonnoonedeadpunk: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBYm1hxEUV7VNQ6gKKweVuEc88LuNSRps708QyIfFDCy neil@rockylinux.org_t1416:26
noonedeadpunkroot@23.253.56.2116:27
noonedeadpunkSo what I'm doing is `dnf remove erlang-25.2.3-1.el8.x86_64 rabbitmq-server-3.11.10-1.el8.noarch`; `dnf remove erlang-25.2.3-1.el8.x86_64 rabbitmq-server-3.11.10-1.el8.noarch`16:28
noonedeadpunkAnd then trying to re-install rabbit/erlang16:28
noonedeadpunkhm.....16:33
NeilHanlonnoonedeadpunk: i assume you modified the RabbitMQ.repo file?16:33
noonedeadpunkI supposedly have a workaround.... Which is even more weird16:33
noonedeadpunkJust did16:33
noonedeadpunkto use gpg signature from repo 1 and install from repo 2....16:33
noonedeadpunkwhich is /o\16:33
NeilHanlonlol...16:34
noonedeadpunkAlready rolledback16:34
NeilHanlonhttps://github.com/rabbitmq/rabbitmq-server/discussions/742716:35
noonedeadpunkwell. another question is that centos has already rolledback gnupg version that was problematic to sha-116:36
noonedeadpunkand rocky never had that16:37
noonedeadpunkBUT, I think now it's rpm itself that broken 16:37
noonedeadpunkAs centos could do `rpm --import` and here it's the problematic part16:37
NeilHanlonhm. see https://www.rabbitmq.com/install-rpm.html (I'm guessing this is where you got that idea from ,yea?)16:39
NeilHanlonspecificall the "Red Hat 8, CentOS Stream , CentOS 8," section16:39
noonedeadpunkyeah16:40
NeilHanlonIMO that fix is fine. to be honest i don't know how this was working before because SHA1 has always been disallowed in Rocky 9 because of the crypto policies16:41
NeilHanlonand we've not (to my knowledge) seen this...16:41
noonedeadpunkwell, we didn't use this repo before :D16:41
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973216:41
NeilHanlonohh16:42
NeilHanlon:D 16:42
NeilHanlonwere we using the messaging sig one?16:42
NeilHanlon(which I assume is also borked.....)16:42
noonedeadpunknah, it was cloudsmith16:42
NeilHanlonah16:42
noonedeadpunkthat's the change https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/879732/4/vars/redhat.yml16:43
noonedeadpunkI wonder how other NFV/Storage sigs worked with sha-1 keys?16:44
NeilHanlonyeah i'm trying to work that out myself, too... only thing I can think is that Rocky was providing the key via `distribution-gpg-keys` already so it wasn't being downloaded or installed (?)16:50
noonedeadpunkhuh, might be... But kinda weird to disallow SHA-1 and pre-build such keys at the same time... 16:56
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-rabbitmq_server master: Switch rabbitmq repo back to packagecloud  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87973217:16
NeilHanlonyeah i'm confused.. i'm done on that box btw.. i grabbed a support bundle17:16
noonedeadpunkNeilHanlon: btw, lxc worked just fine17:17
NeilHanlonever weirder 🤔17:17
noonedeadpunkas well as my rocky image locally (but it was old so might be not upgraded)17:17
NeilHanloni have alist of all the packages so I can recreate the environment17:17
noonedeadpunk++17:17
NeilHanlonit could be a bad mirror, or an outdated one :\17:17
opendevreviewMerged openstack/openstack-ansible stable/zed: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985017:20
noonedeadpunkor just container image being slightly different?17:23
noonedeadpunkif anybody around - we need another vote to unblock Y - https://review.opendev.org/c/openstack/openstack-ansible/+/87985117:59
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Add documentation on refreshing hosts file  https://review.opendev.org/c/openstack/openstack-ansible/+/87948318:02
opendevreviewMerged openstack/openstack-ansible-rabbitmq_server stable/zed: Do not use 'always' tag in inappropriate places  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/87801519:28
opendevreviewMerged openstack/openstack-ansible master: Define individual haproxy services for each console type  https://review.opendev.org/c/openstack/openstack-ansible/+/87808319:50
opendevreviewMerged openstack/openstack-ansible-os_neutron stable/zed: Workaround ovs bug that resets hostname with add command  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87910320:04
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Enable TLS frontend for repo_server by default  https://review.opendev.org/c/openstack/openstack-ansible/+/87642620:26
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Implement separated haproxy service config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118921:00
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Rename openstack_haproxy_horizon_stick_table variable  https://review.opendev.org/c/openstack/openstack-ansible/+/87979121:00
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible master: Add support for TLS backends  https://review.opendev.org/c/openstack/openstack-ansible/+/87908521:00
opendevreviewMerged openstack/openstack-ansible stable/zed: Remove nova-scheduler from ironic compute container_skel  https://review.opendev.org/c/openstack/openstack-ansible/+/87948221:10
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_neutron master: Add TLS support to neutron_server backends  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87365421:20
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-repo_server master: Add TLS support to repo_server backends  https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/87642921:25
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_neutron master: Add TLS support to neutron_server backends  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/87365421:28
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-repo_server master: Add TLS support to repo_server backends  https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/87642921:29
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_nova master: Add TLS support to nova API backends  https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/87481021:34
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_cinder master: Add TLS support to cinder backends  https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/87496622:53
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_glance master: Add TLS support to glance backends  https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/82101122:56
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_keystone master: Rename keystone_ssl to keystone_backend_ssl  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/87937923:38
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_keystone master: Use chain cert file for apache  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/87991423:38
opendevreviewMerged openstack/openstack-ansible stable/yoga: Replace CentOS 9 Jobs with Rockylinux  https://review.opendev.org/c/openstack/openstack-ansible/+/87985123:51
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_horizon master: Change default value for horizon_enable_ssl  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951523:59
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_horizon master: Fix horizon_enable_ssl logic  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951423:59
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_horizon master: Rename horizon_enable_ssl to horizon_backend_ssl  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951623:59
opendevreviewDamian DÄ…browski proposed openstack/openstack-ansible-os_horizon master: Add PKI support to horizon backends  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/87951723:59

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!