*** SheenaG has quit IRC | 00:03 | |
*** barra204 has quit IRC | 00:03 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 00:09 |
---|---|---|
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/201833 | 00:21 |
*** woodster_ has quit IRC | 00:21 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 00:23 |
*** david-lyle has quit IRC | 00:25 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/201833 | 00:29 |
*** kfarr has joined #openstack-barbican | 00:30 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 00:31 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/201833 | 00:36 |
*** kfarr has quit IRC | 00:39 | |
*** bitblt has quit IRC | 00:44 | |
*** SheenaG has joined #openstack-barbican | 01:29 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 01:31 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/201833 | 01:37 |
*** kfarr has joined #openstack-barbican | 01:43 | |
*** SheenaG has quit IRC | 01:57 | |
*** kebray has joined #openstack-barbican | 02:11 | |
*** david-lyle has joined #openstack-barbican | 02:12 | |
*** SheenaG has joined #openstack-barbican | 02:16 | |
*** dave-mccowan has quit IRC | 02:18 | |
*** zz_dimtruck is now known as dimtruck | 02:32 | |
*** david-lyle has quit IRC | 02:35 | |
*** kfarr has left #openstack-barbican | 02:40 | |
*** SheenaG has quit IRC | 02:43 | |
*** david-lyle has joined #openstack-barbican | 03:38 | |
*** kebray has quit IRC | 03:59 | |
*** crc32 has quit IRC | 04:06 | |
*** dimtruck is now known as zz_dimtruck | 05:01 | |
*** Nirupama has joined #openstack-barbican | 05:07 | |
*** kebray has joined #openstack-barbican | 05:41 | |
*** kebray has quit IRC | 05:41 | |
*** kebray has joined #openstack-barbican | 05:42 | |
*** everjeje has joined #openstack-barbican | 06:55 | |
*** zigo has quit IRC | 07:24 | |
*** zigo has joined #openstack-barbican | 07:25 | |
*** shohel has joined #openstack-barbican | 07:28 | |
*** dabukalam has quit IRC | 07:30 | |
*** dabukalam has joined #openstack-barbican | 07:32 | |
*** yuanying_ has joined #openstack-barbican | 07:55 | |
*** yuanying has quit IRC | 07:57 | |
*** kebray has quit IRC | 07:59 | |
*** shohel has quit IRC | 09:23 | |
*** tkelsey has joined #openstack-barbican | 09:29 | |
*** jaosorior has joined #openstack-barbican | 09:54 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Add Private Key to the resulting container if stored-key order https://review.openstack.org/199142 | 10:05 |
*** mmdurrant has quit IRC | 10:09 | |
*** jamielennox is now known as jamielennox|away | 10:41 | |
openstackgerrit | Merged openstack/python-barbicanclient: Updated from global requirements https://review.openstack.org/201833 | 11:25 |
*** openstack has joined #openstack-barbican | 11:36 | |
*** nkarandi has joined #openstack-barbican | 11:37 | |
*** openstackstatus has joined #openstack-barbican | 11:37 | |
*** ChanServ sets mode: +v openstackstatus | 11:37 | |
*** nkarandi has quit IRC | 11:37 | |
*** nkarandi has joined #openstack-barbican | 11:37 | |
jaosorior | alee: ping | 12:15 |
*** darrenmoffat has quit IRC | 12:29 | |
*** darrenmoffat has joined #openstack-barbican | 12:29 | |
*** shohel has joined #openstack-barbican | 12:29 | |
*** woodster_ has joined #openstack-barbican | 12:30 | |
*** mikeymeitbual has quit IRC | 12:30 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: Override grep exit code for wait_for_ca in dogtag gate https://review.openstack.org/202086 | 12:40 |
*** SheenaG has joined #openstack-barbican | 12:56 | |
alee | jaosorior, pong | 12:56 |
jaosorior | alee: Was gonna ask you if you had noticed that the dogtag gate has been failing. But in the meantime I think I figured out the problem and have submitted a potential fix | 12:57 |
alee | jaosorior, I had not noticed but am looking at your fix | 12:57 |
jaosorior | alee: Seems that it failed again even with that fix https://jenkins06.openstack.org/job/gate-barbican-dogtag-devstack-dsvm-f21/40/console | 13:00 |
jaosorior | alee: Maybe I was actually not wrong about the "sleep" also causing the exit_trap to trigger | 13:00 |
alee | jaosorior, whats the "exit_trap"? | 13:02 |
jaosorior | alee: http://logs.openstack.org/42/199142/5/check/gate-barbican-dogtag-devstack-dsvm-f21/b3f566d/logs/devstacklog.txt.gz#_2015-07-15_11_37_01_217 | 13:03 |
jaosorior | alee: Which I assume is this: https://github.com/openstack-infra/devstack-gate/blob/master/run-tests.sh#L22 | 13:04 |
jaosorior | alee: Although I'm not sure... I really haven't seen any other instance of that around | 13:05 |
alee | jaosorior, I think the error has something to do with this : A valid DNS domain name MUST be established to use PKI services! | 13:08 |
alee | jaosorior, that looks like an error message from pkispawn | 13:09 |
jaosorior | alee: Can you take a look into that? | 13:09 |
jaosorior | either way... In reality I'm thinking that the dogtag gate actually doesn't do the loop in that wait_for_ca function. So the commit might not be irrelevant. But yeah, your suspision sounds more accurate | 13:10 |
jaosorior | alee: What info do oyu need? | 13:11 |
alee | jaosorior, not immediately. I'll have to get back to it later today. | 13:11 |
alee | jaosorior, I see the script does this -- ++ sudo mv .tmp.ca.cfg /etc/dogtag/ca.cfg | 13:12 |
alee | 2015-07-15 12:58:38.448 | ++ sudo pkispawn -v -f /etc/dogtag/ca.cfg -s CA | 13:12 |
alee | 2015-07-15 12:58:38.705 | A valid DNS domain name MUST be established to use PKI services! | 13:12 |
alee | it would be useful to see whats in ca.cfg | 13:12 |
alee | ie. whats being passed to pkispawn | 13:12 |
alee | but now that I think about it -- pkispawn might be calling dnsdomainname | 13:13 |
alee | checking .. | 13:13 |
jaosorior | alee: https://github.com/openstack/barbican/blob/master/contrib/devstack/lib/barbican#L370 | 13:13 |
alee | jaosorior, the problem is indeed dnsdomainname | 13:16 |
alee | jaosorior, the pkispawn code does this .. | 13:16 |
alee | dnsdomainname = subprocess.check_output( | 13:17 |
alee | "dnsdomainname", shell=True) | 13:17 |
alee | # workaround for pylint error E1103 | 13:17 |
alee | config.pki_dns_domainname = str(dnsdomainname).rstrip('\n') | 13:17 |
alee | if not len(config.pki_dns_domainname): | 13:17 |
alee | print log.PKI_DNS_DOMAIN_NOT_SET | 13:17 |
alee | sys.exit(1) | 13:17 |
alee | jaosorior, and that log is exactly the error message you see in the log | 13:17 |
alee | jaosorior, what this means is that we should set the dnsdomainname before calling pkispawn | 13:18 |
*** rellerreller has joined #openstack-barbican | 13:22 | |
alee | jaosorior, makes sense? | 13:22 |
jaosorior | yup | 13:22 |
jaosorior | although I would have thought that it was already set to some default, but fair enough | 13:24 |
alee | jaosorior, it must have been before -- perhaps something changed in the scripts above this. | 13:32 |
alee | (which resulted in all the dogtag gates failing) | 13:32 |
alee | jaosorior, setting it explicitly in the dogtag gate code will ensure this wont happen again. | 13:32 |
alee | jaosorior, are you going to submit a fix? | 13:33 |
jaosorior | yeah | 13:34 |
jaosorior | sending some mails first though | 13:34 |
alee | jaosorior, cool- thanks | 13:39 |
jaosorior | done | 13:42 |
jaosorior | alee: Alright, taking a look now | 13:42 |
*** gyee has joined #openstack-barbican | 13:43 | |
*** mdarby has joined #openstack-barbican | 13:48 | |
*** rellerreller has quit IRC | 14:00 | |
*** spotz_zzz is now known as spotz | 14:02 | |
*** pglass has joined #openstack-barbican | 14:03 | |
*** nkarandi has quit IRC | 14:10 | |
*** pglbutt has joined #openstack-barbican | 14:10 | |
*** zz_dimtruck is now known as dimtruck | 14:11 | |
*** kfarr has joined #openstack-barbican | 14:12 | |
*** pglass has quit IRC | 14:14 | |
*** Kevin_Bishop has joined #openstack-barbican | 14:25 | |
*** diazjf has joined #openstack-barbican | 14:27 | |
*** xaeth_afk is now known as xaeth | 14:27 | |
*** silos has joined #openstack-barbican | 14:36 | |
*** jorge_munoz has joined #openstack-barbican | 14:38 | |
*** pglbutt has quit IRC | 14:40 | |
openstackgerrit | Daniel Tadrzak proposed openstack/barbican: Barbican objects base https://review.openstack.org/202141 | 14:43 |
*** rellerreller has joined #openstack-barbican | 14:50 | |
*** gyee has quit IRC | 14:50 | |
*** gyee has joined #openstack-barbican | 14:54 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE ** https://review.openstack.org/202146 | 14:58 |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/barbican: ** DO NOT MERGE ** https://review.openstack.org/202146 | 15:03 |
diazjf | jaosorior, can you please take a look at my patch for Barbican client? https://review.openstack.org/#/c/196876/ :-D | 15:06 |
jaosorior | diazjf: It's in my queue. But I can't at the moment, need to head out pretty soon | 15:06 |
jaosorior | (6pm in my timezone) | 15:07 |
jaosorior | but by tomorrow you'll have a score in that commit :) | 15:07 |
diazjf | jaosorior, no worries!! thanks I appreciate it | 15:07 |
*** pglass has joined #openstack-barbican | 15:11 | |
*** rm_work|away is now known as rm_work | 15:16 | |
*** crc32 has joined #openstack-barbican | 15:17 | |
*** crc32 is now known as crc32_soda_break | 15:39 | |
*** ig0r__ has quit IRC | 15:39 | |
*** ig0r_ has joined #openstack-barbican | 15:40 | |
*** rm_work is now known as rm_work|away | 15:45 | |
*** rm_work|away is now known as rm_work | 16:00 | |
*** rellerreller has quit IRC | 16:01 | |
*** kfarr has quit IRC | 16:03 | |
*** kfarr has joined #openstack-barbican | 16:06 | |
*** rellerreller has joined #openstack-barbican | 16:07 | |
*** rm_work is now known as rm_work|away | 16:11 | |
*** rm_work|away is now known as rm_work | 16:13 | |
*** tkelsey has quit IRC | 16:18 | |
*** gyee has quit IRC | 16:19 | |
*** crc32_soda_break is now known as crc32 | 16:20 | |
*** chadlung has joined #openstack-barbican | 16:22 | |
*** shohel has quit IRC | 16:23 | |
*** everjeje has quit IRC | 16:28 | |
*** silos has left #openstack-barbican | 16:30 | |
*** crc32 has quit IRC | 16:32 | |
*** crc32 has joined #openstack-barbican | 16:36 | |
*** kfarr has quit IRC | 16:52 | |
*** pglass has quit IRC | 16:55 | |
*** kfarr has joined #openstack-barbican | 16:56 | |
*** ptoohill is now known as pothole | 16:57 | |
*** pglass has joined #openstack-barbican | 17:02 | |
*** pglass has quit IRC | 17:18 | |
*** shohel has joined #openstack-barbican | 17:31 | |
*** pglass has joined #openstack-barbican | 17:31 | |
*** kebray has joined #openstack-barbican | 17:33 | |
*** shohel has quit IRC | 17:33 | |
*** kebray has quit IRC | 17:54 | |
*** gyee has joined #openstack-barbican | 17:57 | |
*** silos has joined #openstack-barbican | 18:10 | |
*** silos1 has joined #openstack-barbican | 18:33 | |
*** silos has quit IRC | 18:36 | |
*** silos1 has left #openstack-barbican | 18:51 | |
*** pglass has quit IRC | 18:56 | |
*** pglass has joined #openstack-barbican | 19:07 | |
*** diazjf has quit IRC | 19:14 | |
*** cbader has joined #openstack-barbican | 19:15 | |
cbader | I have tried to get barbican up with devstack and tried following the https://wiki.openstack.org/wiki/BarbicanDevStack I can only get barbican if I disable all other services. Anyone have this running with cinder, nova | 19:18 |
cbader | I get and error like this "Another app is currently holding the xtables lock. Perhaps you want to use the -w option?" | 19:18 |
*** kfarr has quit IRC | 19:21 | |
*** gyee has quit IRC | 19:25 | |
*** mdarby has quit IRC | 19:33 | |
*** gyee has joined #openstack-barbican | 19:34 | |
*** kfarr has joined #openstack-barbican | 19:37 | |
*** rellerreller has quit IRC | 19:43 | |
*** mmdurrant has joined #openstack-barbican | 19:47 | |
*** dave-mccowan has joined #openstack-barbican | 19:48 | |
*** dave-mccowan has quit IRC | 19:55 | |
*** dave-mccowan has joined #openstack-barbican | 19:58 | |
*** shohel has joined #openstack-barbican | 19:59 | |
cbader | I put the barbican.log file on pastebin, http://paste.openstack.org/show/378375/ if someone can look at it and make recommendation I would appreciate it. | 20:03 |
*** silos1 has joined #openstack-barbican | 20:04 | |
*** kfarr has quit IRC | 20:04 | |
*** diazjf has joined #openstack-barbican | 20:04 | |
redrobot | cbader not sure what's killing barbican | 20:07 |
redrobot | seems like it's starting fine. :-\ | 20:07 |
cbader | It is strange if I don't load any other service it comes up | 20:07 |
cbader | I don't see barbican in the screen -r | 20:08 |
cbader | is there a command to start it manually | 20:09 |
cbader | it shows up in the keystone service-list but doesn't show up in screen -r | 20:09 |
cbader | the stack fail to complete with with this error "Another app is currently holding the xtables lock. Perhaps you want to use the -w option? | 20:10 |
cbader | " have you seen this. | 20:10 |
redrobot | cbader can't say that I have... I don't use devstack much. I usually just run a standalone barbican for development. | 20:11 |
redrobot | cbader maybe something's changed in devstack recently? or maybe we're doing something wrong in our devstack bits. | 20:11 |
cbader | The install instructions are pretty old from March. | 20:12 |
redrobot | cbader sorry I can't be more helpful. | 20:12 |
redrobot | rm_work what was the link to your devstack instructions? | 20:12 |
rm_work | uhh | 20:12 |
cbader | Thank you for responding that does help that someone is out there. | 20:12 |
rm_work | i am not sure they're up to date, but | 20:12 |
rm_work | https://gist.github.com/rm-you/6feacb91182f5c011018 | 20:13 |
rm_work | haven't tried it in a little bit | 20:13 |
rm_work | might have bit-rotted, so be aware | 20:13 |
rm_work | if it breaks, i can take a look in a moment | 20:13 |
rm_work | cbader: ^^ | 20:13 |
cbader | I had a issue with line 22 mv /tmp/devstack /opt/stack/ it put the devstack files in the /opt/stack directory instead of creating devstach with the files. | 20:14 |
cbader | I am using Ubuntu 14.04 that might an issue. I had to create /opt/stack/devstack manually and chown it with stack:stack | 20:15 |
cbader | I used the local.conf but modified it so it would use my IP and install the other services. If I exclude the other services with disable_all_services barbican comes up but nothing else. | 20:17 |
cbader | I am working on a Horizon module for linking to external web-service and it needs barbican. | 20:18 |
cbader | I need to have nova, cinder, glance, neutron, and swift running to do work. | 20:18 |
redrobot | cbader if you don't have time to look into it, it may be good to file a bug at https://bugs.launchpad.net/barbican | 20:20 |
redrobot | cbader I can mention it in the weekly meeting next week. | 20:20 |
*** chadlung has quit IRC | 20:20 | |
cbader | redrobot: I will file a bug and still keep looking at it. Need to get something running. | 20:20 |
redrobot | cbader I'm unfortunately super busy right now and wouldn't get a chance to look into for at least a couple of weeks. | 20:20 |
cbader | redrobot: thanks for the help. | 20:21 |
*** kfarr has joined #openstack-barbican | 20:21 | |
redrobot | cbader you might want to ask the infra folks about the table error | 20:22 |
redrobot | cbader they may have more insight into the inner workings of devstack | 20:22 |
cbader | redrobot: thank will do. | 20:22 |
silos1 | can someone point me to the module where the barbican database gets occupied? | 20:25 |
redrobot | silos1 occupied? | 20:25 |
*** dave-mccowan has quit IRC | 20:26 | |
silos1 | Ah. I mean where the database gets configured with the tables. Say I've pointed barbican to a sql database in the conf file. Isn't there a point in time after running "barbican.sh install" that the barbican will connect to mysql and configure the database? | 20:26 |
rm_work | cbader: that is weird | 20:27 |
rm_work | cbader: line 22 is not... ambiguous | 20:27 |
rm_work | it should work | 20:27 |
*** dave-mccowan has joined #openstack-barbican | 20:28 | |
*** chadlung has joined #openstack-barbican | 20:28 | |
rm_work | if that command didn't work right, something on your system is *fscked* | 20:28 |
rm_work | cbader: did you run this as root? the script is designed to run as root | 20:29 |
rm_work | since it has to apt-get and create a user | 20:29 |
cbader | rw_work: it wouldn't be the first time. I thought the command looked fine to me and when it didn't work I thought what the heck. | 20:29 |
silos1 | redrobot: I think I found it. I was looking in the wrong directory :-( | 20:29 |
redrobot | silos1 k... out of the box, the api process will apply the alembic migrations to build up the schema | 20:30 |
redrobot | silos1 I was trying to find the exact place where that happens. | 20:30 |
redrobot | silos1 there's a config option to turn off the auto-migrate. then you can use barbican-db-manage script to do the migration manually. | 20:31 |
silos1 | redrobot: ah nice. I'll have to look into that. | 20:31 |
silos1 | It's no problem finding the exact place. I just wanted a general area where to start looking. | 20:32 |
rm_work | cbader: yeah that mv command is completely unambiguous and should work on any *nix system back to like ... 1980s | 20:32 |
rm_work | cbader: are you SURE it's not working right? | 20:32 |
*** chadlung has quit IRC | 20:32 | |
rm_work | we're pretty much in "that makes so little sense I almost don't believe what you're saying" territory here | 20:33 |
cbader | rm_work: when I ran the command and I went to check it there wasn't a devstack directory under the /opt/stack and all the devstack files were in the /opt/stack directory I tried it twice. | 20:34 |
cbader | rm_work: the other guy in the cubical looked at it and said wierd | 20:35 |
*** pglbutt has joined #openstack-barbican | 20:35 | |
*** pglass has quit IRC | 20:36 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 20:39 |
*** chadlung has joined #openstack-barbican | 20:58 | |
*** dave-mccowan has quit IRC | 21:01 | |
*** gyee has quit IRC | 21:09 | |
*** rellerreller has joined #openstack-barbican | 21:12 | |
*** rm_work is now known as rm_work|away | 21:14 | |
*** rm_work|away is now known as rm_work | 21:20 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/barbican: Updated from global requirements https://review.openstack.org/201817 | 21:20 |
rm_work | cbader: lol | 21:21 |
rm_work | cbader: i would take that computer, cover it in salt, and burn it | 21:21 |
*** dave-mccowan has joined #openstack-barbican | 21:21 | |
*** silos1 has left #openstack-barbican | 21:27 | |
*** shohel has quit IRC | 21:33 | |
*** dave-mccowan has quit IRC | 21:39 | |
*** crc32 has quit IRC | 21:44 | |
*** crc32 has joined #openstack-barbican | 21:44 | |
*** chadlung has quit IRC | 21:45 | |
*** jamielennox|away is now known as jamielennox | 21:49 | |
*** rm_work is now known as rm_work|away | 21:50 | |
*** rm_work|away is now known as rm_work | 21:52 | |
*** kfarr has left #openstack-barbican | 21:54 | |
*** chadlung has joined #openstack-barbican | 21:56 | |
*** Kevin_Bishop has quit IRC | 21:57 | |
*** crc32 has quit IRC | 21:57 | |
*** chadlung has quit IRC | 22:00 | |
*** crc32 has joined #openstack-barbican | 22:00 | |
*** crc32 has quit IRC | 22:09 | |
*** xaeth is now known as xaeth_afk | 22:11 | |
*** chadlung has joined #openstack-barbican | 22:17 | |
*** crc32 has joined #openstack-barbican | 22:23 | |
*** jaosorior has quit IRC | 22:26 | |
*** rellerreller has quit IRC | 22:26 | |
*** crc32 has quit IRC | 22:29 | |
*** crc32 has joined #openstack-barbican | 22:31 | |
*** chadlung has quit IRC | 22:31 | |
*** crc32 has quit IRC | 22:31 | |
*** crc32 has joined #openstack-barbican | 22:33 | |
*** SheenaG has quit IRC | 22:34 | |
*** diazjf has quit IRC | 22:40 | |
*** pglbutt has quit IRC | 22:50 | |
*** spotz is now known as spotz_zzz | 23:01 | |
*** dimtruck is now known as zz_dimtruck | 23:02 | |
*** yuanying_ has quit IRC | 23:24 | |
*** dave-mccowan has joined #openstack-barbican | 23:37 | |
*** yuanying has joined #openstack-barbican | 23:42 | |
*** dave-mccowan has quit IRC | 23:46 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!