gmann | abhishekk: is there policy changes recently in glance. patrole tests started failing - https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_aa4/720601/1/check/patrole-admin/aa4a224/testr_results.html | 00:36 |
---|---|---|
*** Liang__ has joined #openstack-glance | 01:10 | |
*** rcernin has quit IRC | 03:10 | |
*** rcernin has joined #openstack-glance | 03:24 | |
*** evrardjp has quit IRC | 04:37 | |
*** evrardjp has joined #openstack-glance | 04:37 | |
*** Anticimex has quit IRC | 05:10 | |
*** Anticimex has joined #openstack-glance | 05:15 | |
*** ratailor has joined #openstack-glance | 05:24 | |
*** udesale has joined #openstack-glance | 05:35 | |
*** gyee has quit IRC | 05:53 | |
abhishekk | gmann, this is the recent change to policy, https://review.opendev.org/#/c/716078/ | 06:07 |
*** udesale has quit IRC | 06:26 | |
*** udesale has joined #openstack-glance | 06:32 | |
*** threestrands has quit IRC | 07:56 | |
whoami-rajat | Hi #openstack-glance , i'm getting the following error while executing glance rootwrap | 08:22 |
whoami-rajat | ()[root@controller-0 babaab9326f1592e6d8219629f7f40d7]# sudo glance-rootwrap /etc/glance/rootwrap.conf umount /var/lib/glance/mnt/nfs/babaab9326f1592e6d8219629f7f4... | 08:22 |
abhishekk | whoami-rajat, is it something to do with https://github.com/openstack/glance_store/blob/master/etc/glance/rootwrap.d/glance_cinder_store.filters | 08:23 |
whoami-rajat | yep, thanks abhishekk | 08:24 |
abhishekk | no worries | 08:24 |
*** tkajinam has quit IRC | 08:51 | |
*** Liang__ has quit IRC | 09:52 | |
abhishekk | smcginnis, not able to reproduce functional-py37 locally, I guess we should skip this test temporary | 10:08 |
zigo | Hello ! | 10:19 |
zigo | I'm trying to congugre glance with swift, but it doensn't work unless I set swift_store_auth_insecure=true | 10:20 |
zigo | I've set the CA cert ... | 10:20 |
zigo | But it doesn't seem working. | 10:20 |
zigo | So the question is: what's the directive in /etc/glance/glance-swift.conf ? | 10:20 |
zigo | Is it where it should go? | 10:21 |
zigo | puppet-swift doesn't have an option for the CA in the case of the swift backend ... :/ | 10:22 |
zigo | That's something I'd like to fix for my test env, in production, that's fine, I got a real SSL cert, though that's kind of annoying... | 10:28 |
*** szaher has joined #openstack-glance | 10:34 | |
*** brinzhang has quit IRC | 10:35 | |
*** belmoreira has joined #openstack-glance | 11:47 | |
*** belmoreira has quit IRC | 11:48 | |
*** belmoreira has joined #openstack-glance | 11:48 | |
*** tkajinam has joined #openstack-glance | 11:56 | |
*** udesale_ has joined #openstack-glance | 12:02 | |
openstackgerrit | Rajat Dhasmana proposed openstack/glance_store master: Add lock per share for cinder nfs mount https://review.opendev.org/716874 | 12:03 |
*** tkajinam has quit IRC | 12:04 | |
*** udesale has quit IRC | 12:05 | |
*** rcernin has quit IRC | 12:11 | |
openstackgerrit | Rajat Dhasmana proposed openstack/glance_store master: Add lock per share for cinder nfs mount/umount https://review.opendev.org/716874 | 12:59 |
whoami-rajat | and finally this will make glance totally work with cinder nfs as store ^^ | 13:00 |
*** ratailor has quit IRC | 13:16 | |
*** ratailor has joined #openstack-glance | 13:17 | |
*** ratailor has quit IRC | 13:20 | |
*** ratailor has joined #openstack-glance | 13:23 | |
gmann | abhishekk: but that is just deprecating not removal and patrole is testing glance policy via default policy. | 13:26 |
*** ratailor has quit IRC | 13:26 | |
*** ratailor has joined #openstack-glance | 13:26 | |
*** jv has quit IRC | 13:28 | |
*** ratailor has quit IRC | 13:33 | |
*** jv has joined #openstack-glance | 13:35 | |
*** ratailor has joined #openstack-glance | 13:35 | |
*** ratailor has quit IRC | 13:38 | |
jokke_ | zigo: I'll try to look into it | 13:41 |
jokke_ | zigo: any indication what breaks there? | 13:41 |
jv | whoami-rajat, good news! | 14:09 |
whoami-rajat | thanks jv | 14:10 |
jokke_ | whoami-rajat: I know I sound like a fecking broken record, but yet again, is there any reason why all this did not go into os_brick instead of the consuming service? | 14:12 |
whoami-rajat | jokke_, all the change are regarding maintaining state of the host on which the shares are mounted, it's much safer to have all the locks and thread sync code executing on the host rather than the node containing os-brick | 14:28 |
whoami-rajat | jokke_, it's the same reason we have drivers in cinder and nova handling the synchronization part and just using os-brick for mounting (which too is eliminated on this patch) | 14:29 |
jokke_ | whoami-rajat: so my point is there is no visibility difference if this all mount code was part of os_brick imported from cinder driver vs. living in the glance_store. The main difference is what you just brought out. Now we need this in Cinder, Nova and Glance and keep all three maintained istead of just in os_brick | 14:34 |
jokke_ | which I thought was the whole point of os_brick but recent events have been proving me wrong on that more than once lately | 14:38 |
whoami-rajat | jokke_, os_brick handles most of the types but i feel there is an exception with filesystem type drivers, since we mount/unmount the directory on the local host, there should exist code to handle their races as well. | 14:59 |
*** belmoreira has quit IRC | 15:12 | |
gmann | abhishekk: so my worry is if some changes broke the deployment like patrole testing default policy is broken suddenly. I need to debug that what change exactly caused those failure but if you have something on top of your mind. | 15:26 |
zigo | jokke_: When I set swift_store_auth_insecure=False I get an error 500 when I upload an image to Glance, even if I have swift_store_cacert set correctly. | 15:39 |
zigo | I have to set it to True to get it to work, that's the issue... | 15:40 |
zigo | jokke_: FYI, that's with Train. | 15:42 |
jokke_ | zigo: thanks, that helps already to narrow it down. I'll try to poke it soon. Likely won't have anything for you today, but hopefully Monday | 15:56 |
zigo | jokke_: Thanks ! :) | 15:57 |
jokke_ | zigo: and that is with py3 or py27? | 15:57 |
zigo | jokke_: I'm the OpenStack Debian package maintainer, therefore, I'm using all with py3 since a long time ! (Debian was the first distro to do the switch) | 15:57 |
jokke_ | zigo: I remember that, just haven't used debian for years. My good old memories with Debian was that they are alway the last ones to pick up anything new :P | 15:58 |
jokke_ | zigo: so nothing personal, just used to the fact that with Debian you gotta be used to old software | 15:59 |
zigo | jokke_: s/Debian/Ubuntu/ ... | 15:59 |
zigo | Things happen in Debian Sid *first*, and then elsewhere. | 15:59 |
zigo | I can promiss you it's truth. | 15:59 |
jokke_ | ;) | 15:59 |
zigo | It's just that everyone uses stable, very few use testing/sid. | 15:59 |
jokke_ | but yeah, that should be everything I need to reproduce and dig into the issue itself | 16:00 |
zigo | :) | 16:00 |
jokke_ | zigo: tru, I can't remember ever running anything but stable seriously | 16:00 |
zigo | jokke_: FYI, I'm using https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer (which I wrote). | 16:00 |
zigo | Nothing special with it, it uses puppet-openstack which is used by a lot of people. | 16:01 |
jokke_ | ohh my | 16:03 |
jokke_ | I was hoping something actually sensible from you :P | 16:03 |
*** udesale_ has quit IRC | 16:23 | |
*** gyee has joined #openstack-glance | 16:31 | |
*** evrardjp has quit IRC | 16:37 | |
*** evrardjp has joined #openstack-glance | 16:37 | |
abhishekk | gmann, sorry, I was away due to medical emergency and will be away till Monday | 17:04 |
abhishekk | apart from the mentioned change we don't have anything else change related to policy | 17:05 |
abhishekk | in that change we have deprecated admin role as well as changed the default value as well | 17:05 |
abhishekk | kindly go through the release note for details | 17:06 |
gmann | abhishekk: ohk, no issue. please take care. | 17:12 |
*** rosmaita has quit IRC | 18:25 | |
*** rosmaita has joined #openstack-glance | 18:26 | |
*** gyee has quit IRC | 23:10 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!