Monday, 2024-09-16

opendevreviewJonathan Rosser proposed openstack/openstack-ansible stable/2023.1: Ensure "parallel" package is installed for CI log collection  https://review.opendev.org/c/openstack/openstack-ansible/+/92940507:52
jrossergood morning08:05
kleinigood morning :)08:08
noonedeadpunkпщщв ьщктштп09:24
noonedeadpunkcrap, mornings :D09:28
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: Use mariadb client instead of mysql for healthcheck  https://review.opendev.org/c/openstack/openstack-ansible/+/92283909:29
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Respect defined interface for external VIP with LE  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/92433309:29
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-galera_server master: Improve handling of galera_install_method changing  https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/92790110:01
opendevreviewMerged openstack/openstack-ansible-rabbitmq_server master: Manage apt repositores and keys using deb822_repository module  https://review.opendev.org/c/openstack/openstack-ansible-rabbitmq_server/+/90783311:24
opendevreviewMerged openstack/openstack-ansible stable/2023.1: Ensure "parallel" package is installed for CI log collection  https://review.opendev.org/c/openstack/openstack-ansible/+/92940513:05
noonedeadpunkhuh, weird bug https://bugs.launchpad.net/openstack-ansible/+bug/2080765 - and I think we doo see the same in our CI actually14:29
noonedeadpunkSo I kinda wonder if we should jsut install selinux bindings only for utility container or everywhere just to be on the safe side14:29
noonedeadpunkso add python3-libselinux here https://opendev.org/openstack/openstack-ansible/src/branch/master/inventory/group_vars/utility_all/defaults.yml#L31 or here: https://opendev.org/openstack/openstack-ansible-openstack_hosts/src/branch/master/vars/redhat-9.yml#L4814:31
noonedeadpunkI'm thinking about second actually14:32
noonedeadpunkbut that feels really as CentOS bug14:35
noonedeadpunkNeilHanlon: maybe you have some idea of wtf CentOS is doing with selinux to require bindings when selinux is disabled?14:36
jrosseri wonder if we should mark support for centos as experimental now14:53
jrosserbecasue we basically make the CI nv and just ignore it14:53
noonedeadpunkgiven that other openstack projects dropped CentOS CI overall...15:12
noonedeadpunkand it's not even in PTI15:12
noonedeadpunkthough we got 2 quite close to each other reports in a wekk15:13
noonedeadpunkwhich means there's some interest for it15:13
noonedeadpunkfrankly -I've spotted failure a while ago, though was assuming it will just go away as it used to with CentOS15:18
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Ensure python libselinux bindings for containers  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/92954015:18
NeilHanlonmornin' -- will take a look15:19
noonedeadpunkto have that said - rocky is unaffected15:19
noonedeadpunkbut if I understand how things are done - if nothing to do with CentOS - it will get promoted to RHEL and thus to Rocky?15:20
noonedeadpunkbut it's really weird, I'm not even completely sure where things go wrong - Ansible, some collection or CentOS. 15:22
noonedeadpunkIt;s jsut I'm inclined to blame CentOS as Rocky is absolutely fine.15:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts master: Rename libselinux python package bindings  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/92954215:23
NeilHanlonvery well could be something that we'll see in Rocky/RHEL in November15:44
NeilHanloni can think of at least four other times CentOS Stream broke in a similar way15:45
NeilHanlonso, not a crazy thought lol15:45
noonedeadpunkyeah.... but this time it kinda feels more ansible tbh, as I kinda don't feel anything too weird running shell commands inside containers15:46
noonedeadpunkbu again - could be a lot of things...15:46
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/2024.1: Disable uWSGI usage by default  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/92954916:10
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/2023.2: Disable uWSGI usage by default  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/92955016:10
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron stable/2023.1: Disable uWSGI usage by default  https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/92955116:11
jrossernoonedeadpunk: i see we don't actually test on centos here https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/929540/117:39
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: DNM - Trest CentOS  https://review.opendev.org/c/openstack/openstack-ansible/+/92956217:49
noonedeadpunkquick hack ^17:49
noonedeadpunkwow17:49
noonedeadpunkzuul obviously got updated17:49
noonedeadpunkI can't say it become more convenient though - I'd say otherwise17:50
noonedeadpunktakes at least 3 more clicks to see jobs for the tas17:51
WireLosthello, very nice to see OSA adding Ubuntu 24.04 support20:33
WireLostquick note: to deploy AIO with 'install_method: distro', I had to add a line to file '/etc/ansible/roles/uwsgi/vars/debian.yml', below '_uwsgi_distro_libpython:' block containing: '  noble: libpython3.12'20:35
WireLostotherwise it would fail to setup openstack20:36
jrosserWireLost: be sure to understand what is written here about 24.04 https://governance.openstack.org/tc/reference/runtimes/2024.2.html20:56
jrosserwe also classify install_method: distro as experimental https://docs.openstack.org/openstack-ansible/latest/admin/upgrades/compatibility-matrix.html21:00
jrosserand finally, we do no testing whatsoever of ubuntu noble for install_method: distro21:00
WireLostjrosser, ok, thanks for the info!21:55
jrosserWireLost: if you would like to submit a patch for the uwsgi role for the libpython fix, please do.... else i can take a look at it tomorrow21:58
WireLostsounds fun! but I don't have any contributor account yet... No rush though!  :-P22:00
WireLostI also want to share that I just ran 'openstack-ansible' and it passed 'ceph-install.yml' without any issues! With OSA AIO master branch on 24.04, I have Ceph 19 up and running in a laboratory, looks promising!22:28
WireLostI had to set some variables to `user_variables.yml` after `bootstrap-aio.sh`, so that Ceph playbooks passed...22:29
WireLostAdded to '/etc/openstack_deploy/user_variables.yml': 'install_method: distro', 'apply_security_hardening: false', 'ceph_pkg_source: distro'22:30
WireLostAdded to '/etc/openstack_deploy/user_variables_ceph.yml': 'ceph_origin: distro', 'ceph_stable_release: squid', 'docker: false, 'containerized_deployment: false', and 'dashboard_enabled: false'.22:31
jrosserwell like I say we don’t test any of that :)22:47
jrosserand there is some value having your deployment exactly replicated in what does pass our CI22:47
jrossersupport for installing from distro packages has mostly been added by enthusiastic people associated with those distros22:48
jrosserthe source install stuff on the other hand is mostly coming from cloud operators22:49
jrosserand the secret weapon of the source installes is being able to trivially apply patched code to your deployment for whatever bugs or other issues you encounter22:50
WireLostgot it, but Ceph didn't work initially because Ceph upstream doesn't provide 'noble' APT repo yet, so 'distro' for Ceph to pass was the only way I got it working on 24.04... And gee, no docker please lol22:52
jrosserwe also do not recommend using the built in ceph integration for production22:55
jrosseras that is there primarily as a test harness22:55
WireLostRight, I also got isolated Ceph 19 being deployed only with 'ceph-ansible' 'stable-8.0' branch, on 24.04, all good, no OSA. But I think it's kind of neat to use 'openstack-ansible' to deploy and maintain Ceph while leveraging its nice inventory under '/etc/openstack_deploy/'...22:57
WireLostwhat could possibly go wrong?  :-D22:58
jrosserwell indeed23:00
jrosserthere’s a fairly sparse grid of all these choices that are actually a good idea23:00
WireLostyep, understood, looks like it's tricky to find the perfect (tested enough) 'combo'  =P23:03
WireLostI knew that 24.04 uses Python 3.12, but I didn't realize it's not tested with OpenStack (thanks for the info, BTW). How does Canonical plan to provide support for it in an LTS release? 23:07
WireLostI also had to change '/etc/apparmor.d/local/abstractions/libvirt-qemu' to '/etc/apparmor.d/abstractions/libvirt-qemu', new path in 24.04, it seems (TASK: 'ceph_client : Write AppArmor configuration for ceph immutable object caching')23:36

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!