| noonedeadpunk | Moha not sure I'm getting where you lead to | 07:01 |
|---|---|---|
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible master: WIP - test Vexxhost CAPI driver for magnum https://review.opendev.org/c/openstack/openstack-ansible/+/893240 | 08:04 |
| opendevreview | Merged openstack/openstack-ansible master: Gather extra networking facts for keepalived https://review.opendev.org/c/openstack/openstack-ansible/+/896634 | 10:53 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Add security rule for octavia healthmanager https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/897316 | 10:57 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Adopt for usage openstack_resources role https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/889879 | 11:09 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/2023.1: Gather extra networking facts for keepalived https://review.opendev.org/c/openstack/openstack-ansible/+/897283 | 11:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/zed: Gather extra networking facts for keepalived https://review.opendev.org/c/openstack/openstack-ansible/+/897284 | 11:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Gather extra networking facts for keepalived https://review.opendev.org/c/openstack/openstack-ansible/+/897285 | 11:10 |
| NeilHanlon | btw - https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt | 12:02 |
| mgariepy | fun with recent glibc ! | 12:33 |
| jrosser | hmm config_template is still broken for raw | 13:16 |
| jrosser | rather it's patched but we don't use the patched version in OSA | 13:16 |
| noonedeadpunk | Yeah, we don't :( | 13:35 |
| ayush | hi Team, when can we expect solution for the bug which i mentioned yesterday | 13:46 |
| ayush | 2038315 | 13:47 |
| ayush | is is stopping upgrade, because we are unable to bootstrap the ansible | 13:47 |
| jrosser | i think we gave a workround? | 13:48 |
| ayush | what is the workaround | 13:49 |
| jrosser | https://meetings.opendev.org/irclogs/%23openstack-ansible/%23openstack-ansible.2023-10-03.log.html#t2023-10-03T15:17:24 | 13:49 |
| ayush | This does not work, it fails | 13:50 |
| jrosser | its a broken release of the ansible netcommon collection | 13:50 |
| ayush | i tried | 13:50 |
| jrosser | can you describe exactly what you did? | 13:50 |
| ayush | i made a user collection file and used the same line as mentioned | 13:51 |
| ayush | and bootstrapped it | 13:51 |
| jrosser | where did you put that file? | 13:51 |
| ayush | i have done it before, i know the trick | 13:51 |
| ayush | under openstack_deploy | 13:52 |
| jrosser | i will take a look | 13:54 |
| jrosser | just to be clear it is brokenness from the ansible collection | 13:54 |
| jrosser | not openstack-ansible itself | 13:54 |
| jrosser | we have to workaround their mess | 13:54 |
| ayush | yeah that i m aware, but we are dependant in OSA | 13:54 |
| ayush | that is the truth | 13:55 |
| NeilHanlon | jrosser: is there a place where the `ANSIBLE_GALAXY_SERVER` env var (or ansible config var) could be set for the deployment? if i am reading correctly, setting this should use the old galaxy https://docs.ansible.com/ansible/latest/reference_appendices/config.html#galaxy-server | 13:56 |
| NeilHanlon | i.e. to https://old-galaxy.ansible.com/ | 13:57 |
| jrosser | almost certainly yes | 13:57 |
| ayush | i tried it for bootstrap.sh, but that is also failing | 13:58 |
| ayush | may be my command is not right | 13:58 |
| ayush | `ANSIBLE_GALAXY_SERVER_GALAXY_URL'="https://old-galaxy.ansible.com/" ./scripts/bootstrap-ansible.sh | 13:58 |
| ayush | i tried this | 13:58 |
| jrosser | i wonder if it's actually ANSIBLE_GALAXY_SERVER_LIST | 14:00 |
| jrosser | the documentation is a little vague but ANSIBLE_GALAXY_SERVER talks about roles and ANSIBLE_GALAXY_SERVER_LIST about collections | 14:01 |
| jrosser | ayush: what branch are you trying to bootstrap? xena? | 14:03 |
| ayush | xena yes | 14:06 |
| ayush | 24.6.0 to be precise | 14:06 |
| jrosser | ayush: can you try `ANSIBLE_GALAXY_SERVER=https://old-galaxy.ansible.com ./scripts/bootstrap-ansible.sh` | 14:18 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Add security rule for octavia healthmanager https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/897316 | 14:20 |
| ayush | ok | 14:20 |
| ayush | yes it works, but i will test it more | 14:30 |
| ayush | as i have to test in a scarion in a upgrade | 14:31 |
| noonedeadpunk | damiandabrowski: ^ just in case you've missed :) | 14:58 |
| noonedeadpunk | I wonder though how we should patch that | 14:59 |
| noonedeadpunk | As using old-galaxy is kinda... meh | 14:59 |
| noonedeadpunk | just switch to github right away might be a better option I guess | 14:59 |
| damiandabrowski | yup, I'm gathering more information about this situation, hopefully I will be able to suggest some fix tonight | 14:59 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Fix example playbook linters https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/897350 | 16:28 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Add security rule for octavia healthmanager https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/897316 | 16:28 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_octavia master: Adopt for usage openstack_resources role https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/889879 | 16:28 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/yoga: Use github to fetch ansible collections https://review.opendev.org/c/openstack/openstack-ansible/+/897351 | 16:29 |
| damiandabrowski | noonedeadpunk jrosser NeilHanlon ^ (i also included an explanation what exactly happened to galaxy and why it's broken only for older ansible versions) | 16:33 |
| noonedeadpunk | well... Maybe we update ansible version on Yoga? | 16:38 |
| noonedeadpunk | And then I can apply this switch to branches in EM? | 16:38 |
| noonedeadpunk | as 2.12.6 -> 2.12.8 sounds not bad | 16:39 |
| noonedeadpunk | damiandabrowski: jrosser wdyt? | 16:39 |
| noonedeadpunk | also, was you able to workaround the issue with user-collection-requirements? | 16:40 |
| noonedeadpunk | or you haven't tried this? | 16:40 |
| NeilHanlon | ayush said they tried it but it did not work. i have no tried, personally | 16:41 |
| NeilHanlon | upgrading seems not unreasonable | 16:41 |
| NeilHanlon | especially for a minor rev | 16:41 |
| noonedeadpunk | Just switching to git had it's own downside and that's why wasn't done at the first place | 16:42 |
| damiandabrowski | i'll test 2.12.8 in a moment, need a break | 16:42 |
| damiandabrowski | noonedeadpunk: what downside? | 16:42 |
| noonedeadpunk | damiandabrowski: there's a note about it in ansible-collection-requirements, but I realized it's not clear. | 16:49 |
| noonedeadpunk | damiandabrowski: what's your output of ansible-galaxy collection list -p /etc/ansible ? | 16:50 |
| noonedeadpunk | As I guess it's either `null` or `*` - can't recall exactly | 16:50 |
| noonedeadpunk | when installed from Git of these versions | 16:50 |
| noonedeadpunk | (specifically for these 3 collections) | 16:51 |
| damiandabrowski | https://paste.openstack.org/show/bU3DbxKN3WYyNENSrl5r/ | 17:00 |
| damiandabrowski | ahh, so maybe it would be better to use old-galaxy.ansible.com | 17:00 |
| * damiandabrowski testing ansible 2.12.8 | 17:00 | |
| noonedeadpunk | Not sure it's better though :D Would be perfect if 2.12.8 just works... | 17:03 |
| noonedeadpunk | It doesn't solve the Xena issue though... But for Xena I guess we can live with * instead of version , as it's EM, so best effort kinda | 17:04 |
| noonedeadpunk | especially is user-collection-requirements work properly there :p | 17:05 |
| noonedeadpunk | *if | 17:06 |
| damiandabrowski | 2.12.8 seems to be working fine | 17:07 |
| damiandabrowski | so bump 2.12.8 for yoga, and switch to github for all EM versions(up to stein)? | 17:07 |
| noonedeadpunk | damiandabrowski: not sure about stein specifically, as it should have went to EOL... But as it's not (still), might be worth if backports are straightforward | 17:24 |
| noonedeadpunk | (I guess they're not though) | 17:24 |
| damiandabrowski | okok, I'll push patches. Let's see how many EM branches will pass through gating :D | 17:30 |
| noonedeadpunk | None | 17:38 |
| noonedeadpunk | I can answert that right away | 17:38 |
| noonedeadpunk | all of them have rabbit/erlang repo issues | 17:38 |
| noonedeadpunk | I was going to look into that though soonish | 17:39 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/yoga: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible/+/897355 | 17:54 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/yoga: Bump ansible-core to 2.12.8 https://review.opendev.org/c/openstack/openstack-ansible/+/897351 | 17:56 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/xena: Use github to fetch ansible collections https://review.opendev.org/c/openstack/openstack-ansible/+/897356 | 17:59 |
| opendevreview | Damian Dąbrowski proposed openstack/openstack-ansible stable/wallaby: Use github to fetch ansible collections https://review.opendev.org/c/openstack/openstack-ansible/+/897357 | 18:01 |
| damiandabrowski | ok, proposed patches for yoga, xena and wallaby. I also tested ussuri but it's not affected(ansible 2.9.9), probably this version was not affected yet | 18:14 |
| noonedeadpunk | ++ makes sense | 18:16 |
| opendevreview | Merged openstack/openstack-ansible master: Allow deployment on debian bookworm hosts https://review.opendev.org/c/openstack/openstack-ansible/+/894560 | 19:13 |
| jrosser | I think we are still broken on bookworm with ova? | 19:34 |
| jrosser | argh | 19:34 |
| jrosser | ovs | 19:34 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!