| *** jhfeng has quit IRC | 00:00 | |
| *** jhfeng has joined #openstack-barbican | 00:01 | |
| *** jhfeng has quit IRC | 00:05 | |
| *** mjm159 has quit IRC | 00:10 | |
| *** fawadkhaliq has joined #openstack-barbican | 00:25 | |
| openstackgerrit | Nathan Reller proposed openstack/barbican: Added KMIP Secret Store to Devstack https://review.openstack.org/307434 | 00:26 |
|---|---|---|
| *** fawadkhaliq has quit IRC | 00:56 | |
| *** fawadkhaliq has joined #openstack-barbican | 00:57 | |
| *** zz_dimtruck is now known as dimtruck | 01:02 | |
| *** dave-mccowan has joined #openstack-barbican | 01:07 | |
| *** jhfeng has joined #openstack-barbican | 01:29 | |
| *** lixiaoy1 has joined #openstack-barbican | 01:50 | |
| *** gyee has quit IRC | 02:27 | |
| *** dave-mcc_ has joined #openstack-barbican | 02:31 | |
| *** dave-mccowan has quit IRC | 02:32 | |
| *** sekrit is now known as CIA | 02:44 | |
| *** dave-mcc_ has quit IRC | 02:47 | |
| *** fawadkhaliq has quit IRC | 02:53 | |
| *** yuanying has quit IRC | 02:56 | |
| *** yuanying has joined #openstack-barbican | 03:48 | |
| *** fawadkhaliq has joined #openstack-barbican | 04:28 | |
| *** jhfeng has quit IRC | 04:38 | |
| *** jhfeng has joined #openstack-barbican | 04:38 | |
| *** jhfeng has quit IRC | 04:43 | |
| *** Nirupama has joined #openstack-barbican | 05:30 | |
| *** dimtruck is now known as zz_dimtruck | 05:36 | |
| *** zz_dimtruck is now known as dimtruck | 05:43 | |
| *** yuanying_ has joined #openstack-barbican | 05:57 | |
| *** yuanying has quit IRC | 05:58 | |
| *** dimtruck is now known as zz_dimtruck | 06:24 | |
| *** yuanying_ has quit IRC | 06:47 | |
| *** yuanying has joined #openstack-barbican | 06:48 | |
| *** jaosorior has joined #openstack-barbican | 06:57 | |
| *** permalac has joined #openstack-barbican | 07:00 | |
| *** zz_dimtruck is now known as dimtruck | 07:25 | |
| *** dimtruck is now known as zz_dimtruck | 07:34 | |
| *** scheuran has joined #openstack-barbican | 07:37 | |
| *** fawadkhaliq has quit IRC | 07:45 | |
| *** fawadkhaliq has joined #openstack-barbican | 07:45 | |
| *** yuanying has quit IRC | 07:49 | |
| *** yuanying has joined #openstack-barbican | 07:52 | |
| *** fawadkhaliq has quit IRC | 08:02 | |
| *** yuanying has quit IRC | 08:05 | |
| *** zz_dimtruck is now known as dimtruck | 08:07 | |
| *** dimtruck is now known as zz_dimtruck | 08:17 | |
| *** david-lyle has quit IRC | 08:59 | |
| *** david-lyle has joined #openstack-barbican | 09:00 | |
| *** zz_dimtruck is now known as dimtruck | 09:08 | |
| *** dimtruck is now known as zz_dimtruck | 09:17 | |
| *** zz_dimtruck is now known as dimtruck | 10:08 | |
| *** dimtruck is now known as zz_dimtruck | 10:18 | |
| *** jaosorior has quit IRC | 10:52 | |
| *** jaosorior has joined #openstack-barbican | 10:53 | |
| *** zz_dimtruck is now known as dimtruck | 11:09 | |
| *** dimtruck is now known as zz_dimtruck | 11:19 | |
| *** zz_dimtruck is now known as dimtruck | 12:10 | |
| *** dimtruck is now known as zz_dimtruck | 12:21 | |
| *** rellerreller has joined #openstack-barbican | 12:46 | |
| *** dave-mccowan has joined #openstack-barbican | 12:46 | |
| *** asingh has joined #openstack-barbican | 12:59 | |
| *** zz_dimtruck is now known as dimtruck | 13:07 | |
| *** fredyx10 has joined #openstack-barbican | 13:18 | |
| *** fredyx101 has joined #openstack-barbican | 13:19 | |
| *** fredyx10 has quit IRC | 13:22 | |
| *** asingh has quit IRC | 13:25 | |
| *** Nirupama has quit IRC | 13:34 | |
| *** dimtruck is now known as zz_dimtruck | 13:44 | |
| *** asingh has joined #openstack-barbican | 13:55 | |
| *** fredyx101 has quit IRC | 13:55 | |
| *** fredyx10 has joined #openstack-barbican | 13:57 | |
| *** jaosorior has quit IRC | 14:09 | |
| *** jmckind has joined #openstack-barbican | 14:09 | |
| *** jaosorior has joined #openstack-barbican | 14:09 | |
| *** zz_dimtruck is now known as dimtruck | 14:12 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:15 | |
| *** jaosorior has quit IRC | 14:16 | |
| *** spotz_zzz is now known as spotz | 14:27 | |
| *** asingh has quit IRC | 14:28 | |
| *** fredyx10 has quit IRC | 14:32 | |
| *** asingh has joined #openstack-barbican | 14:38 | |
| *** jaosorior has joined #openstack-barbican | 14:40 | |
| *** asingh has quit IRC | 14:47 | |
| *** asingh has joined #openstack-barbican | 14:47 | |
| openstackgerrit | Sharat Sharma proposed openstack/barbican: Added secret=True attribute to 'kek'. https://review.openstack.org/308383 | 14:48 |
| *** dimtruck is now known as zz_dimtruck | 15:09 | |
| *** fredyx10 has joined #openstack-barbican | 15:16 | |
| openstackgerrit | Steve Martinelli proposed openstack/barbican: migrate keystone_data to openstackclient https://review.openstack.org/307837 | 15:17 |
| *** zz_dimtruck is now known as dimtruck | 15:24 | |
| *** jhfeng has joined #openstack-barbican | 15:24 | |
| *** fredyx10 has quit IRC | 15:27 | |
| *** fredyx10 has joined #openstack-barbican | 15:28 | |
| *** jaosorior has quit IRC | 15:29 | |
| *** scheuran has quit IRC | 15:37 | |
| *** jmckind has quit IRC | 15:38 | |
| *** dimtruck is now known as zz_dimtruck | 15:49 | |
| *** gyee has joined #openstack-barbican | 15:54 | |
| *** mmotiani_ has joined #openstack-barbican | 15:57 | |
| *** mmotiani_ has quit IRC | 15:57 | |
| *** mmotiani_ has joined #openstack-barbican | 15:59 | |
| *** zz_dimtruck is now known as dimtruck | 16:04 | |
| *** nkinder has quit IRC | 16:37 | |
| *** nkinder has joined #openstack-barbican | 16:37 | |
| *** asingh has quit IRC | 16:43 | |
| *** asingh has joined #openstack-barbican | 16:43 | |
| *** diazjf has joined #openstack-barbican | 17:23 | |
| *** michael_ has joined #openstack-barbican | 17:32 | |
| *** diazjf has quit IRC | 17:33 | |
| *** jmckind has joined #openstack-barbican | 17:42 | |
| *** jmckind has quit IRC | 17:46 | |
| *** edtubill has joined #openstack-barbican | 18:04 | |
| *** woodster_ has joined #openstack-barbican | 18:39 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 18:45 | |
| *** agrebennikov has joined #openstack-barbican | 18:49 | |
| agrebennikov | hi folks, I'm trying to set up barbican in poc environment. I've created db for it, but when I execute "barbican-db-manage upgrade" I get mysql errors like "The maximum column size is 767 bytes" | 18:54 |
| agrebennikov | any help will be appreciated)) | 18:55 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:56 | |
| redrobot | hi agrebennikov | 18:57 |
| agrebennikov | hi redrobot | 18:57 |
| redrobot | agrebennikov I think we had a bug submitted for that (or a similar issue) | 18:57 |
| redrobot | agrebennikov digging through launchpad, give me a sec. | 18:58 |
| *** dimtruck is now known as zz_dimtruck | 18:59 | |
| *** zz_dimtruck is now known as dimtruck | 19:03 | |
| *** michael_ has quit IRC | 19:04 | |
| *** michael_ has joined #openstack-barbican | 19:05 | |
| redrobot | agrebennikov https://bugs.launchpad.net/barbican/+bug/1528774 | 19:06 |
| openstack | Launchpad bug 1528774 in Barbican "db creation fails with error "Specified key was too long"" [Undecided,Fix released] - Assigned to Christopher Solis (cnsolis) | 19:06 |
| redrobot | agrebennikov seems like the same issue you're having? | 19:06 |
| agrebennikov | right.... | 19:07 |
| redrobot | agrebennikov should have been fixed in Mitaka | 19:07 |
| redrobot | agrebennikov what version are you deploying? | 19:07 |
| agrebennikov | im using trusty packages (liberty) | 19:08 |
| redrobot | agrebennikov ah yeah... we haven't backported that fix to liberty... hmm... easiest thing would be for you to try the Mitaka release... not sure what the packaging status is though. | 19:08 |
| agrebennikov | redrobot, I'm just wondering how the code is passing the gates then?)) | 19:09 |
| agrebennikov | if there is a stable release with such a huge issue | 19:10 |
| *** michael_ has quit IRC | 19:10 | |
| redrobot | agrebennikov around the Liberty timeframe, we were building the devstack gate schema from the models (ie, the alembic migrations were not tested) | 19:11 |
| redrobot | agrebennikov after this bug was reported/fixed we changed the gates to always use the migrations | 19:11 |
| redrobot | agrebennikov you're the first to report it broken in Liberty though | 19:11 |
| agrebennikov | interesting fact though - when i used liberty code from github I guess I didn't have this issue... | 19:12 |
| agrebennikov | seems it is only in packages | 19:12 |
| redrobot | agrebennikov could be that the packages disable the feature that builds the schema from the models | 19:12 |
| agrebennikov | redrobot, any way to change this behaviour in place? | 19:13 |
| agrebennikov | redrobot, I'm not very familiar with building schema in the code | 19:13 |
| redrobot | agrebennikov yeah, should be a config file option, give me a sec | 19:14 |
| redrobot | agrebennikov add a line to your barbican.conf like so | 19:19 |
| redrobot | db_auto_create = True | 19:19 |
| agrebennikov | hm.... is it really about creation or fulfilling the existing one with schema? | 19:20 |
| redrobot | agrebennikov that should cause the API process to build the DB schema from the models instead of the alembic migration | 19:20 |
| *** edtubill has quit IRC | 19:21 | |
| agrebennikov | redrobot, and what will be the workflow then? "create db -> install package -> change this option -> restart barbican-api"? | 19:21 |
| redrobot | agrebennikov yeah, that sounds right | 19:22 |
| woodster_ | agrebennikov: in auto create mode, barbican will populate the schema for you. So you'd probably have to drop all existing tables and run barbican again in the auto create mode. | 19:29 |
| agrebennikov | all right, let me try it) | 19:30 |
| agrebennikov | redrobot, default section? | 19:32 |
| agrebennikov | since if I Just restart barbican-api with this option in the default - nothing happens | 19:33 |
| agrebennikov | from the code perspective it is in default | 19:36 |
| woodster_ | agrebennikov: actually the default is for auto populate to be True: https://github.com/openstack/barbican/blob/master/barbican/common/config.py#L61 | 19:39 |
| woodster_ | agrebennikov: i.e. if you add nothing to the barbican.conf it should auto populate. | 19:40 |
| agrebennikov | woodster_, yeah, I found it already. it is a bit complicated to analyze what happens since thr process starts with wsgi | 19:40 |
| agrebennikov | and it doersn't write anything useful into log | 19:41 |
| woodster_ | agrebennikov: it is actually used here: https://github.com/openstack/barbican/blob/master/barbican/model/repositories.py#L193 | 19:41 |
| agrebennikov | I saw that too, tnx | 19:41 |
| agrebennikov | even though there is not much sense for me | 19:42 |
| woodster_ | agrebennikov: yeah the original intent was for barbican to just run quickly out of the box against a simple db (sqlite) | 19:42 |
| agrebennikov | woodster_, as usually for any new project :( "lets create Something... quickly. and figure out down the road" | 19:43 |
| woodster_ | agrebennikov: alembic didn't used to work against sqlite early on I recall | 19:43 |
| agrebennikov | woodster_, my personal problem - I don't know the word "alembic" =( | 19:43 |
| woodster_ | agrebennikov: that's the frame work that applies all the version files here: https://github.com/openstack/barbican/tree/master/barbican/model/migration/alembic_migrations/versions | 19:44 |
| agrebennikov | woodster_, I mean I don't know what it means in this context | 19:44 |
| agrebennikov | ok | 19:44 |
| agrebennikov | woodster_, but is it supposed to work in the way similar to all other OS projects? | 19:45 |
| woodster_ | agrebennikov: well if you don't auto create, alembic builds the db instead of SQLAlchemy, using those version files to do it. Both will get you to the same place, but alembic is the 'proper' way, that most deployers would do things | 19:45 |
| woodster_ | agrebennikov: other projects use alembic if that's what you mean. The auto-create mode I'm not so sure about actually | 19:46 |
| woodster_ | agrebennikov: if you see discrepancies relative to other projects, please bring them up though. | 19:47 |
| *** michael_ has joined #openstack-barbican | 19:49 | |
| agrebennikov | woodster_, just talked to the dev guy next to me and he explained the difference to me)) so yes, I probably was using sqlite before, when I was deploying manually | 19:57 |
| agrebennikov | woodster_, do you know if it is possible to re-build the packages using barbican CI? | 19:57 |
| agrebennikov | I mean with the patch integrated | 19:58 |
| agrebennikov | since otherwise I will have to path the code once I installed the packages. which is very unlikely | 19:59 |
| *** dimtruck is now known as zz_dimtruck | 19:59 | |
| agrebennikov | woodster_, or, alternatively (as you said) I'll have to figure out why the api server doesn't build the schema for me | 19:59 |
| *** rellerreller has quit IRC | 20:00 | |
| *** zz_dimtruck is now known as dimtruck | 20:01 | |
| *** edtubill has joined #openstack-barbican | 20:07 | |
| openstackgerrit | ZhiQiang Fan proposed openstack/barbican: use thread safe fnmatch https://review.openstack.org/308571 | 20:26 |
| woodster_ | agrebennikov: well, if I understand you, you are trying to run barbican from packaging, which might be disabling the auto-populate mode? | 20:28 |
| agrebennikov | woodster_, not really. I install from packages, yes, but I cannot get the code to create the schema for me anyway. Even though I see cfg.BoolOpt('db_auto_create', default=True) | 20:30 |
| woodster_ | agrebennikov: do you see logs at all, and if so any errors? | 20:31 |
| agrebennikov | woodster_, I do see the log, but it doesn't have much sense. | 20:32 |
| agrebennikov | spawned uWSGI master process (pid: 25168) | 20:32 |
| agrebennikov | *** Stats server enabled on localhost:9314 fd: 6 *** | 20:32 |
| agrebennikov | *** starting uWSGI Emperor *** | 20:32 |
| agrebennikov | thats pretty much it | 20:32 |
| woodster_ | agrebennikov: are you using debian packages or rpms? | 20:33 |
| agrebennikov | deb | 20:33 |
| agrebennikov | woodster_, this is comfusing me also | 20:33 |
| agrebennikov | *** Operational MODE: no-workers *** | 20:33 |
| agrebennikov | !!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!! | 20:33 |
| agrebennikov | no request plugin is loaded, you will not be able to manage requests. | 20:33 |
| openstack | agrebennikov: Error: "!!!!!!!!!!!!!" is not a valid command. | 20:33 |
| woodster_ | agrebennikov: zigo might have some insights here...I think logging is tricky out of the box | 20:34 |
| zigo | o/ | 20:34 |
| agrebennikov | seems so.... | 20:34 |
| zigo | How may I help? | 20:34 |
| agrebennikov | zigo, :) | 20:34 |
| agrebennikov | are you a master of logging? | 20:34 |
| agrebennikov | ;) | 20:34 |
| woodster_ | zigo: I'm trying to recall what you had said about running barbican from packages and logging | 20:34 |
| woodster_ | agrebennikov: zigo is a deb packager for things openstack | 20:35 |
| zigo | If I remember well, there was an issue with barbican daemons not accepting oslo.config options from the command line, no ? | 20:35 |
| woodster_ | zigo: agrebennikov is trying to run barbican from packages, but were there follow on config steps that should be performed to get things working? | 20:35 |
| woodster_ | zigo: I think so | 20:36 |
| woodster_ | zigo: but that should just affect the logging portion of barbican correct? | 20:36 |
| zigo | The issue is that you *cannot* rely on configuration files to set logging, because daemons are sharing a single config file, so it has to be set in the startup script (systemd, upstart, sysv-rc...) | 20:37 |
| agrebennikov | zigo, oh man.... this is just awsome)) do you guys work with those folks who are writing puppet-barbican? | 20:37 |
| agrebennikov | /usr/bin/uwsgi --master --die-on-term --emperor /etc/barbican/vassals --logto /var/log/barbican/barbican-api.log --stats localhost:9314 | 20:38 |
| agrebennikov | this is how I have my barbican instance spawned | 20:38 |
| zigo | agrebennikov: This is not mitaka, as I removed the use of uwsgi in Mitaka ... | 20:38 |
| zigo | agrebennikov: You must be using Liberty, no ? | 20:38 |
| agrebennikov | zigo, right, this is liberty | 20:38 |
| zigo | agrebennikov: I do know EmlienM very well, as I used to be employed by eNovance (before they got aquired by Red Hat). | 20:39 |
| zigo | So yes, I do work with puppet guys, though I'm not really sure about the support for Barbican. | 20:39 |
| zigo | agrebennikov: Also, are you running Ubuntu or Debian? | 20:40 |
| agrebennikov | ubuntu | 20:40 |
| zigo | I *do not* maintain the barbican server package for Ubuntu, they do their own. | 20:40 |
| woodster_ | zigo: oh so they might be adding their own secret sauce to the mix :) | 20:41 |
| zigo | Though the Liberty package may be the one I wrote. | 20:41 |
| woodster_ | zigo: oh got it | 20:41 |
| zigo | (ie: they synched it from Debian at the time, and now decided to add their own secret bugs... :P) | 20:41 |
| zigo | woodster_: Here's the sever list that I maintain in Debian, the one with a U in front are packaged that are re-done by Ubuntu on top of all the Python module dependency which we work out in Debian http://paste.openstack.org/show/494888/ | 20:42 |
| woodster_ | zigo: more U's than not! | 20:43 |
| woodster_ | agrebennikov: so do you have config files at /etc/barbican/...? | 20:45 |
| *** asingh has quit IRC | 21:02 | |
| *** asingh has joined #openstack-barbican | 21:02 | |
| zigo | agrebennikov: I would advise to *not* use the Canonical's pacakge, as it derives from what I did in Liberty, which is full of cruft compared to what I have now for Mitaka. | 21:09 |
| zigo | agrebennikov: Can you upgrade to Mitaka ? | 21:10 |
| zigo | I have Trusty backports for Mitaka as well if you need it. | 21:10 |
| *** fredyx10 has quit IRC | 21:12 | |
| *** xek has quit IRC | 21:16 | |
| *** michael_ has quit IRC | 21:23 | |
| agrebennikov | zigo, sorry for being absent - I was talking to xarses and alex | 21:28 |
| agrebennikov | so no, I cannot upgrade to mitaka( | 21:28 |
| agrebennikov | but we can probably create our own packages if we got CI | 21:28 |
| agrebennikov | for barbican | 21:28 |
| *** xek has joined #openstack-barbican | 21:29 | |
| *** asingh has quit IRC | 21:31 | |
| *** alee has quit IRC | 21:37 | |
| *** alee has joined #openstack-barbican | 21:37 | |
| *** asingh has joined #openstack-barbican | 22:14 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:15 | |
| *** dimtruck is now known as zz_dimtruck | 22:20 | |
| *** spotz is now known as spotz_zzz | 22:21 | |
| *** gyee has quit IRC | 22:25 | |
| *** edtubill has quit IRC | 22:28 | |
| *** asingh has quit IRC | 22:38 | |
| *** asingh has joined #openstack-barbican | 22:39 | |
| *** asingh has quit IRC | 22:49 | |
| *** krotscheck is now known as krotscheck_dcm | 22:57 | |
| *** jhfeng has quit IRC | 22:58 | |
| *** edtubill has joined #openstack-barbican | 22:58 | |
| *** asingh has joined #openstack-barbican | 23:01 | |
| *** asingh has quit IRC | 23:18 | |
| *** jamielennox is now known as jamielennox|away | 23:51 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!