*** zz_dimtruck is now known as dimtruck | 00:03 | |
*** mikedillion has joined #openstack-infra | 00:04 | |
fungi | rough recollection on ssd is consistent with what clarkb said | 00:07 |
---|---|---|
fungi | and yay afs! | 00:07 |
fungi | and yes, there's nothing like roasting your own peppers for chili. i can't stand using chili powder | 00:25 |
*** harlowja_at_home has joined #openstack-infra | 00:29 | |
*** achuprin_ has quit IRC | 00:37 | |
*** bcourt has quit IRC | 00:43 | |
*** mikedillion has quit IRC | 00:49 | |
*** achuprin_ has joined #openstack-infra | 00:53 | |
mordred | mordred@camelot:~$ ls /afs/openstack.org | 01:02 |
mordred | service user | 01:02 |
mordred | BOOM | 01:02 |
mordred | we have an AFS cell my friends | 01:02 |
mordred | fungi, clarkb: ^^ | 01:02 |
mordred | SergeyLukjanov: ^^ | 01:03 |
jeblair | (well, it's not completely set up yet, so don't try this at home, but it exists in some form!) | 01:03 |
*** michchap has joined #openstack-infra | 01:04 | |
*** cnesa18 has joined #openstack-infra | 01:11 | |
*** cnesa18 has quit IRC | 01:16 | |
*** changbl has quit IRC | 01:16 | |
fungi | w00t! | 01:19 |
fungi | i'm reviewing the kerberos change, but slowly | 01:19 |
mordred | fungi: I ahve updates... | 01:21 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 01:21 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 01:21 |
mordred | fungi: ^^ | 01:21 |
fungi | thanks... i'll see if what looked wrong is already corrected in that case | 01:22 |
clarkb | peppers acquired! | 01:23 |
clarkb | they are looking kinda sad but after hours slow cooking should be fine | 01:23 |
clarkb | mordred jeblair it would probably help me at least to have a tldr of what the afs deployment looks like for a heathen that has never used it before | 01:25 |
mordred | clarkb: nope. you must start running it without any help!!! | 01:28 |
mordred | clarkb: we've been taking notes on the put together of it and stuff - and will also write docs | 01:28 |
mordred | clarkb: but once it's walkable-throughable, we'll certainly tl;dr | 01:28 |
clarkb | awesome thanks | 01:29 |
clarkb | does kerberos determine mount perms and filesystem level file access too? | 01:30 |
mordred | yup | 01:30 |
mordred | well, afs does | 01:30 |
mordred | but it uses your kerberos principal to determine who you are | 01:30 |
fungi | and map to the appropriate access controls | 01:36 |
*** baoli has quit IRC | 01:40 | |
*** pcrews has joined #openstack-infra | 01:45 | |
*** med_ has quit IRC | 01:46 | |
*** mfisch has quit IRC | 01:46 | |
*** med_ has joined #openstack-infra | 01:46 | |
*** mfisch` has joined #openstack-infra | 01:47 | |
*** med_ has quit IRC | 01:47 | |
*** med_ has joined #openstack-infra | 01:47 | |
fungi | hrm syntax errors still, but structurally the krb5 implentation looks reasonable to me | 01:56 |
clarkb | is there no existing krb5 puppet module that would work? | 01:57 |
*** cody-somerville_ has quit IRC | 02:01 | |
*** salv-orlando has quit IRC | 02:05 | |
*** stevemar has joined #openstack-infra | 02:16 | |
*** ryanpetrello has quit IRC | 02:22 | |
*** ryanpetrello has joined #openstack-infra | 02:22 | |
*** dimsum_ has joined #openstack-infra | 02:31 | |
*** koolhead17 has joined #openstack-infra | 02:50 | |
*** fandi has quit IRC | 02:50 | |
*** dimtruck is now known as zz_dimtruck | 03:10 | |
*** dimsum_ has quit IRC | 03:21 | |
*** yamahata has joined #openstack-infra | 03:22 | |
*** flashgordon is now known as jogo | 03:23 | |
*** chandan_kumar has joined #openstack-infra | 03:30 | |
*** chandan_kumar has quit IRC | 03:37 | |
*** SumitNaiksatam has quit IRC | 03:48 | |
*** SumitNaiksatam has joined #openstack-infra | 03:50 | |
*** SumitNaiksatam has quit IRC | 03:51 | |
*** SumitNaiksatam has joined #openstack-infra | 03:52 | |
mordred | clarkb: no | 03:53 |
jeblair | clarkb: take a guess? what do you think the answer to that question is? ;) | 03:53 |
mordred | clarkb: I mean, I'm sure there are 7000 half-baked modules that don't work on github and all | 03:54 |
mordred | fungi: yeah - the actual code is completely and utterly untested | 03:54 |
mordred | fungi: because the current install is ninjad | 03:54 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 03:59 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 03:59 |
*** _nadya_ has joined #openstack-infra | 04:04 | |
*** garyh has quit IRC | 04:09 | |
*** fifieldt_ has quit IRC | 04:14 | |
*** harlowja_at_home has quit IRC | 04:17 | |
*** dimsum_ has joined #openstack-infra | 04:22 | |
*** zz_dimtruck is now known as dimtruck | 04:23 | |
*** kirscht has joined #openstack-infra | 04:23 | |
*** dimsum_ has quit IRC | 04:27 | |
*** ivar-lazzaro has quit IRC | 04:38 | |
*** ivar-lazzaro has joined #openstack-infra | 04:38 | |
*** garyh has joined #openstack-infra | 04:40 | |
*** ivar-lazzaro has quit IRC | 04:43 | |
*** Longgeek has joined #openstack-infra | 04:50 | |
*** boris-42 has quit IRC | 04:56 | |
*** pcrews has quit IRC | 05:04 | |
*** dimtruck is now known as zz_dimtruck | 05:19 | |
*** HeOS has quit IRC | 05:26 | |
*** fandi has joined #openstack-infra | 05:31 | |
*** dimsum_ has joined #openstack-infra | 05:32 | |
*** yfried has joined #openstack-infra | 05:32 | |
*** dimsum_ has quit IRC | 05:37 | |
*** SumitNaiksatam has quit IRC | 05:40 | |
*** SumitNaiksatam has joined #openstack-infra | 05:41 | |
*** SumitNaiksatam_ has joined #openstack-infra | 05:48 | |
*** SumitNaiksatam has quit IRC | 05:50 | |
*** SumitNaiksatam_ is now known as SumitNaiksatam | 05:50 | |
*** otter768 has quit IRC | 05:57 | |
*** sabeen1 has joined #openstack-infra | 05:59 | |
*** lttrl has quit IRC | 06:08 | |
*** chandan_kumar has joined #openstack-infra | 06:08 | |
*** chandan_kumar has quit IRC | 06:10 | |
*** stevemar has quit IRC | 06:13 | |
*** _nadya_ has quit IRC | 06:14 | |
*** yfried is now known as yfried|afk | 06:26 | |
*** sunil_ has joined #openstack-infra | 06:30 | |
*** yfried|afk is now known as yfried | 06:37 | |
*** yamahata has quit IRC | 06:40 | |
waynr | clarkb, zaro: is there a recommend approach for dealing with plugin versions in JJB? | 07:12 |
waynr | right now i'm just creating alternate functions of the form __<wrapper-name>_<version>(etc, etc2, etc3) | 07:14 |
waynr | default behavior when version isn't specified is left to a function of the form __<wrapper-name>(etc, etc2, etc3) | 07:14 |
*** pcrews has joined #openstack-infra | 07:14 | |
waynr | which contains the original function contents | 07:15 |
*** jamespage_ has quit IRC | 07:16 | |
waynr | i'm not as worried about the sanity of that approach as i am about how to handle the divergence in documentation between various versions | 07:21 |
*** sabeen1 has quit IRC | 07:22 | |
*** pcrews has quit IRC | 07:31 | |
*** alexpilotti has joined #openstack-infra | 07:51 | |
*** yfried is now known as yfried|afk | 07:59 | |
*** yfried|afk is now known as yfried | 08:10 | |
*** davidhadas has quit IRC | 08:11 | |
*** alexpilotti has quit IRC | 08:15 | |
*** rlandy has joined #openstack-infra | 08:31 | |
*** andreykurilin_ has joined #openstack-infra | 08:31 | |
*** vb has quit IRC | 08:35 | |
*** vb has joined #openstack-infra | 08:35 | |
*** Longgeek has quit IRC | 08:46 | |
*** Longgeek has joined #openstack-infra | 08:46 | |
*** andreykurilin_ has quit IRC | 08:47 | |
*** davidhadas_ has joined #openstack-infra | 08:49 | |
*** Longgeek has quit IRC | 08:50 | |
*** fandi has quit IRC | 08:55 | |
*** salv-orlando has joined #openstack-infra | 09:03 | |
openstackgerrit | Wayne Warren proposed a change to openstack-infra/jenkins-job-builder: Update 'timeout' wrapper module https://review.openstack.org/129467 | 09:05 |
*** rushiagr_away is now known as rushiagr | 09:05 | |
waynr | zaro: ^^ that's what i'm talking about by the way | 09:05 |
*** salv-orlando has quit IRC | 09:07 | |
*** dimsum_ has joined #openstack-infra | 09:09 | |
*** rushiagr is now known as rushiagr_away | 09:12 | |
*** dimsum_ has quit IRC | 09:14 | |
*** _nadya__ has joined #openstack-infra | 09:18 | |
*** ociuhandu has joined #openstack-infra | 09:28 | |
*** yfried is now known as yfried|afk | 09:32 | |
*** ociuhandu has quit IRC | 09:37 | |
*** alexpilotti has joined #openstack-infra | 09:40 | |
*** ociuhandu has joined #openstack-infra | 09:41 | |
*** fandi has joined #openstack-infra | 09:43 | |
*** davidhadas_ has quit IRC | 09:48 | |
*** yfried|afk is now known as yfried | 10:03 | |
*** davidhadas_ has joined #openstack-infra | 10:04 | |
*** andreykurilin_ has joined #openstack-infra | 10:12 | |
*** ociuhandu has quit IRC | 10:13 | |
*** Longgeek has joined #openstack-infra | 10:14 | |
*** ihrachyshka has joined #openstack-infra | 10:26 | |
*** e0ne has joined #openstack-infra | 10:43 | |
*** e0ne has quit IRC | 10:46 | |
*** alexpilotti has quit IRC | 10:47 | |
*** e0ne has joined #openstack-infra | 10:49 | |
*** e0ne has quit IRC | 10:50 | |
*** e0ne has joined #openstack-infra | 10:54 | |
*** e0ne has quit IRC | 10:57 | |
*** ihrachyshka has quit IRC | 10:58 | |
*** e0ne has joined #openstack-infra | 11:00 | |
*** mase_x200 has joined #openstack-infra | 11:02 | |
*** e0ne has quit IRC | 11:02 | |
*** e0ne has joined #openstack-infra | 11:05 | |
*** e0ne has quit IRC | 11:08 | |
*** e0ne has joined #openstack-infra | 11:11 | |
*** davidhadas_ has quit IRC | 11:13 | |
*** e0ne has quit IRC | 11:13 | |
*** primemin7sterp has quit IRC | 11:40 | |
*** primemi10sterp has quit IRC | 11:40 | |
*** primemin1sterp has quit IRC | 11:40 | |
*** primemin3sterp has quit IRC | 11:40 | |
*** primemin8sterp has quit IRC | 11:40 | |
*** 17SAAGJ3L has quit IRC | 11:40 | |
*** primemin4sterp has quit IRC | 11:40 | |
*** primemin9sterp has quit IRC | 11:40 | |
*** primemin6sterp has quit IRC | 11:41 | |
*** primemin5sterp has quit IRC | 11:41 | |
*** primeministerp has quit IRC | 11:41 | |
*** andreykurilin_ has quit IRC | 11:45 | |
*** yfried is now known as yfried|afk | 11:56 | |
*** dimsum_ has joined #openstack-infra | 11:59 | |
*** yfried|afk is now known as yfried | 12:01 | |
*** dimsum_ has quit IRC | 12:03 | |
*** unicell has joined #openstack-infra | 12:06 | |
*** mtreinish has quit IRC | 12:11 | |
*** mase_x200 has quit IRC | 12:35 | |
*** dimsum_ has joined #openstack-infra | 12:37 | |
*** alexpilotti has joined #openstack-infra | 12:39 | |
*** koolhead17 has quit IRC | 12:42 | |
*** yfried has quit IRC | 12:45 | |
*** andreykurilin_ has joined #openstack-infra | 13:16 | |
*** Guest51022 has joined #openstack-infra | 13:22 | |
*** andreykurilin_ has quit IRC | 13:23 | |
*** mtreinish has joined #openstack-infra | 13:24 | |
zaro | waynr: i think what you'll want to do is query jenkins for the plugin version instead of making the user specify the version. this will allow jjb to query for plugin version https://review.openstack.org/#/c/123932/ | 13:32 |
*** pc_m has joined #openstack-infra | 13:35 | |
*** pc_m has quit IRC | 13:36 | |
*** alexpilotti has quit IRC | 13:37 | |
*** unicell has quit IRC | 13:48 | |
*** ihrachyshka has joined #openstack-infra | 13:58 | |
*** ihrachyshka has quit IRC | 14:00 | |
*** ihrachyshka has joined #openstack-infra | 14:04 | |
*** ZZelle has quit IRC | 14:06 | |
*** ZZelle has joined #openstack-infra | 14:06 | |
*** Longgeek has quit IRC | 14:07 | |
*** pc_m has joined #openstack-infra | 14:07 | |
*** Longgeek has joined #openstack-infra | 14:07 | |
*** pc_m has quit IRC | 14:13 | |
*** ihrachyshka has quit IRC | 14:15 | |
*** kashyap has joined #openstack-infra | 14:28 | |
*** pc_m has joined #openstack-infra | 14:31 | |
*** ihrachyshka has joined #openstack-infra | 14:39 | |
*** todd_dsm has joined #openstack-infra | 14:41 | |
*** ihrachyshka has quit IRC | 14:41 | |
*** ihrachyshka has joined #openstack-infra | 14:45 | |
*** msabramo has joined #openstack-infra | 14:48 | |
*** baoli has joined #openstack-infra | 14:51 | |
*** ihrachyshka has quit IRC | 14:55 | |
msabramo | mordred et al: https://pypi.python.org/pypi/setuptools#id1 โ setuptools 7.0 will place the eggs it downloads (from setup_requires and such) to a separate directory called ./.eggs โ this prevents weirdness like failing to permanently install those packages in the virtualenv โ which has been a source of bugs in the past. | 15:02 |
*** ihrachyshka has joined #openstack-infra | 15:08 | |
*** ihrachyshka has quit IRC | 15:10 | |
*** dimsum_ has quit IRC | 15:16 | |
*** dimsum_ has joined #openstack-infra | 15:16 | |
*** dimsum_ has quit IRC | 15:21 | |
*** dimsum_ has joined #openstack-infra | 15:23 | |
*** zz_dimtruck is now known as dimtruck | 15:28 | |
*** dimsum_ has quit IRC | 15:29 | |
*** andreykurilin_ has joined #openstack-infra | 15:37 | |
*** HeOS has joined #openstack-infra | 15:37 | |
waynr | zaro: oh neat, that looks useful--though i am a little concerned about how to deal with differences in feature semantics between plugin versions | 15:52 |
*** _nadya__ has quit IRC | 15:52 | |
*** dimsum_ has joined #openstack-infra | 15:53 | |
*** stevemar has joined #openstack-infra | 15:53 | |
waynr | ie, will th semantics of version X.Y.Z be compatible with X+N.Y.Z such that we could adequately translate the old feature keys and their valid values into corresponding valid XML for that newer version | 15:54 |
*** sabeen has joined #openstack-infra | 15:54 | |
waynr | life would be so much easier if jenkins were just written in python with an API for controlling builds and accessing information about them...(in other words if it were buildbot) | 15:55 |
*** baoli has quit IRC | 15:56 | |
zaro | waynr: sometimes jenkins xml elements will specify a @VERSION string. we usually just drop the version number from the xml and that seems to work. that will typically allows plugin upgrades to work. | 15:57 |
zaro | waynr: other times the xml elements change or get renamed, in those cases the jjb module would need to handle that. | 15:58 |
waynr | yeah i think i ran into that with the timeout plugin, had to explicitly set values corresponding to the newer version of the plugin | 15:59 |
zaro | waynr: would appreciate a review of 123932 | 15:59 |
waynr | okay i'll keep reading through it | 16:00 |
zaro | waynr: unless there's a -1, i'll try to get that change in next week so it will be available for your timeout plugin change. | 16:01 |
*** andreykurilin_ has quit IRC | 16:06 | |
*** otherwiseguy has quit IRC | 16:11 | |
*** bagackiz has quit IRC | 16:13 | |
*** otter768 has joined #openstack-infra | 16:16 | |
*** _nadya_ has joined #openstack-infra | 16:23 | |
*** Longgeek has quit IRC | 16:24 | |
*** _nadya_ has quit IRC | 16:25 | |
*** _nadya_ has joined #openstack-infra | 16:26 | |
fungi | msabramo: neat! and thanks for the heads up... hopefully it doesn't break something else in the process ;) | 16:28 |
msabramo | fungi: Yeah, I also hope there are no unforeseen consequences ;) | 16:29 |
msabramo | only one way to find out! :) | 16:29 |
*** emagana has joined #openstack-infra | 16:29 | |
fungi | also, i should take a screen capture of the zuul status page... it's completely empty (unusual even for a sunday, unless zuul's in the middle of being restarted anyway) | 16:29 |
fungi | or, i should go enjoy my weekend | 16:30 |
jeblair | fungi: you could practice photography on your weekend! take some lovely action shots of zuul! | 16:31 |
fungi | heh | 16:35 |
*** emagana_ has joined #openstack-infra | 16:37 | |
*** sabeen has quit IRC | 16:39 | |
*** emagana has quit IRC | 16:41 | |
*** emagana_ has quit IRC | 16:44 | |
*** Guest51022 has quit IRC | 16:44 | |
*** emagana has joined #openstack-infra | 16:44 | |
*** e0ne has joined #openstack-infra | 16:49 | |
*** emagana has quit IRC | 16:49 | |
clarkb | chili is chilling. now I just wait 8 hours | 16:53 |
fungi | such impatience. i usually don't eat it until the next day ;) | 16:55 |
*** e0ne has quit IRC | 16:55 | |
clarkb | ya I like not waiting that long to eat | 16:56 |
fungi | admittedly, it takes every ounce of willpower i have to not | 16:56 |
clarkb | the leftovers are always great though | 16:56 |
*** e0ne has joined #openstack-infra | 16:59 | |
fungi | i usually make somwhere in the vicinity of 10 liters and then portion the remainder out into 1-liter containers a couple days later and put them in the chest freezer. keeps and reheats amazingly well | 16:59 |
jeblair | me too. but before i make chili -- it's time to make brunswick stew | 17:00 |
jeblair | (to which i do the same thing) | 17:00 |
fungi | yep! and gumbo | 17:00 |
fungi | i have a freezer full of gumbo, chili, cuban red beans, stew... | 17:01 |
*** dtroyer has quit IRC | 17:01 | |
fungi | pizza sauce, pizza dough | 17:02 |
fungi | though i have to put the dough in the kitchen freezer.. my deep-freeze gets cold enough to kill yeast | 17:02 |
*** e0ne has quit IRC | 17:04 | |
*** SumitNaiksatam has quit IRC | 17:08 | |
*** SumitNaiksatam has joined #openstack-infra | 17:09 | |
mordred | clarkb: if chili is chilling, that means you have time to watch piggers and learn AFS things | 17:10 |
mordred | :) | 17:10 |
clarkb | I am watching seahawks | 17:10 |
mordred | oh, are they seahawksing now? blast it - where is the remote ... | 17:11 |
mordred | nevermind. saints are on | 17:11 |
fungi | oh, curry's another good one to do in large quantities. i should probably make that next | 17:14 |
*** SumitNaiksatam has quit IRC | 17:15 | |
*** koolhead17 has joined #openstack-infra | 17:15 | |
*** koolhead17 has joined #openstack-infra | 17:15 | |
openstackgerrit | James E. Blair proposed a change to openstack-infra/system-config: Manage UID/GID with puppet https://review.openstack.org/129476 | 17:17 |
*** dimsum_ has quit IRC | 17:19 | |
*** dimsum_ has joined #openstack-infra | 17:19 | |
jeblair | that's possibly like the most dangerous change in the world to merge, depending on what puppet does ^ | 17:19 |
jeblair | so i'm going to -2 it real quick like :) | 17:20 |
*** sdake_ has joined #openstack-infra | 17:21 | |
*** hdd has joined #openstack-infra | 17:23 | |
*** stevemar has quit IRC | 17:23 | |
*** dimsum_ has quit IRC | 17:24 | |
fungi | if tomorrow's quiet, i can take on semi-manually updating admin account uid/gid and related file ownership on important systems | 17:28 |
fungi | done that so many times when moving servers to nfs-mounted homedirs in environments without a sane id mapping service | 17:29 |
mordred | fungi: I was thinking it's a good candidate for a script :) | 17:31 |
fungi | a _very_ carefully tested script perhaps | 17:32 |
mordred | well, yeah | 17:32 |
fungi | ideally you shuffle each existing user to an unused high-numbered uid/gid temporarily and then rearrange them to the ones you want | 17:33 |
fungi | resetting file ownership at both points | 17:33 |
mordred | oh - so I was thinking we just update /etc/passwd and then run "for user in $userlist ; do chown -R $user:$user /home/$user" | 17:34 |
*** cody-somerville_ has joined #openstack-infra | 17:34 | |
mordred | because honestly the amount of stuff owned individually be any of us on servers is going to be ... low | 17:34 |
fungi | that's probably an okay approximation, but doesn't account for mis-owned files outside /home | 17:34 |
mordred | that it does not | 17:35 |
fungi | which we may just not care to solve | 17:35 |
mordred | were you thinking 'find / -uid $uid' ? | 17:35 |
fungi | that seems fine actually | 17:35 |
fungi | yeah | 17:35 |
fungi | that's what i've done in the past | 17:35 |
mordred | clarkb: can you please explain to me why the hawks are having problems with the RAMS? | 17:35 |
clarkb | because lol | 17:35 |
mordred | I guess things are going well in Missouri currently | 17:36 |
mordred | for the sportsball | 17:36 |
fungi | though that's also been when migrating servers to nfs-root where i had to worry about matching the uids and gids of system service accounts rather than just interactive user accounts | 17:36 |
fungi | which definitely gets a lot more fiddly | 17:36 |
mordred | yah | 17:37 |
mordred | I mean, there will be some of that we'll need to sort out - but that will all be new work | 17:37 |
*** garyh has quit IRC | 17:37 | |
*** med_ has quit IRC | 17:37 | |
*** jhesketh has quit IRC | 17:37 | |
*** pfallenop has quit IRC | 17:37 | |
*** juice has quit IRC | 17:37 | |
*** tcammann has quit IRC | 17:37 | |
*** HeOS_ has quit IRC | 17:37 | |
*** gnuoy has quit IRC | 17:37 | |
*** roaet_ has quit IRC | 17:37 | |
*** Adri2000 has quit IRC | 17:37 | |
*** sressot has quit IRC | 17:37 | |
*** apmelton has quit IRC | 17:37 | |
*** Vek has quit IRC | 17:37 | |
*** jmeridth has quit IRC | 17:37 | |
*** bearhands has quit IRC | 17:37 | |
*** dimtruck has quit IRC | 17:37 | |
*** jroll has quit IRC | 17:37 | |
*** jbryce has quit IRC | 17:37 | |
*** mgagne has quit IRC | 17:37 | |
*** zz_gondoi has quit IRC | 17:37 | |
fungi | my other concern with 129476 is the downstream story... like are we going to instantly break anyone who is cd'ing from our puppet manifests and not paying close attention? (and do we care?) | 17:37 |
*** apmelton has joined #openstack-infra | 17:37 | |
*** dimtruck has joined #openstack-infra | 17:37 | |
*** comstud has joined #openstack-infra | 17:37 | |
*** mgagne has joined #openstack-infra | 17:37 | |
*** gnuoy has joined #openstack-infra | 17:37 | |
*** tcammann has joined #openstack-infra | 17:37 | |
*** med_ has joined #openstack-infra | 17:37 | |
*** Adri2000 has joined #openstack-infra | 17:37 | |
mordred | if they are installing my user account on their systems | 17:38 |
*** garyh has joined #openstack-infra | 17:38 | |
*** Vek has joined #openstack-infra | 17:38 | |
*** jbryce has joined #openstack-infra | 17:38 | |
*** jroll has joined #openstack-infra | 17:38 | |
mordred | and I change my user account | 17:38 |
*** med_ has quit IRC | 17:38 | |
*** med_ has joined #openstack-infra | 17:38 | |
*** jmeridth has joined #openstack-infra | 17:38 | |
mordred | I do not care what that screws up for them | 17:38 |
*** HeOS_ has joined #openstack-infra | 17:38 | |
*** mgagne is now known as Guest52830 | 17:38 | |
*** pfallenop has joined #openstack-infra | 17:38 | |
mordred | because $batshit | 17:38 |
*** roaet_ has joined #openstack-infra | 17:38 | |
fungi | oh, good point, uid/gid are defaulted to unset in localuser.pp | 17:38 |
*** jhesketh has joined #openstack-infra | 17:38 | |
*** juice has joined #openstack-infra | 17:39 | |
jeblair | (btw, this is not required for afs, it just makes the directory listings prettier, and makes it more likely that perms will be correct when things are copied out of afs across systems) | 17:40 |
*** gondoi has joined #openstack-infra | 17:40 | |
*** sressot has joined #openstack-infra | 17:40 | |
jeblair | (afs itself does not rely on uid/gid for access control) | 17:40 |
*** dimtruck is now known as zz_dimtruck | 17:40 | |
jeblair | (so it's mostly for operator sanity rather than a technical requirement) | 17:40 |
fungi | agreed afs won't care, but i also agree that it will be nice to have in place. oh, and we might want to pick a range which does not overlap with the uid/gid ranges in adduser.conf? | 17:43 |
jeblair | fungi: i wouldn't think it would matter for regular users since they will only ever be added by puppet which will have specified ids, right? | 17:44 |
fungi | in reality just not using values near-ish to 1000 is probably fine | 17:44 |
jeblair | definitely would be good to stay away from the system account range | 17:45 |
jeblair | (where packages will be creating users) | 17:45 |
fungi | hrm... i'd want to audit the systems first and make sure of that | 17:45 |
fungi | because, for example, the third-party packages we use may not dtrt there | 17:45 |
jeblair | oh ok. so just stay away altogether | 17:46 |
jeblair | ? | 17:46 |
jeblair | what's the rhel equivalent of adduser.conf | 17:46 |
fungi | as you say, it's probably fine. i mean there's not any actual guarantee they even call adduser much less pass the --system option | 17:46 |
fungi | rhel's useradd follows /etc/login/defs i think | 17:47 |
jeblair | ah yep | 17:47 |
jeblair | UID_MIN 500 | 17:47 |
jeblair | UID_MAX60000 | 17:47 |
jeblair | FIRST_UID=1000 | 17:48 |
jeblair | LAST_UID=29999 | 17:48 |
fungi | er, login.defs | 17:49 |
jeblair | fungi: so you want to start our range at 2000? | 17:50 |
*** sabeen1 has joined #openstack-infra | 17:51 | |
fungi | that seems a sane safety | 17:51 |
openstackgerrit | James E. Blair proposed a change to openstack-infra/system-config: Manage UID/GID with puppet https://review.openstack.org/129476 | 17:53 |
fungi | also, we do add user objects in other places in our manifests... for example http://git.openstack.org/cgit/openstack-infra/system-config/tree/modules/gerrit/manifests/user.pp#n9 resulted in review.o.o giving gerrit2 uid=1000/gid=1003 | 17:53 |
jeblair | aah | 17:53 |
jeblair | then yeah, i'm convinced :) | 17:53 |
fungi | which was sort of what i was afraid of | 17:53 |
fungi | but yeah, 2000 seems safe... i doubt we'll have enough random account churn on the servers to eat up 1000 uids/gids and start intersecting | 17:55 |
fungi | and if we do for some reason, we can revisit then | 17:55 |
*** chuckC_ has quit IRC | 18:02 | |
*** e0ne has joined #openstack-infra | 18:03 | |
*** e0ne has quit IRC | 18:09 | |
*** e0ne has joined #openstack-infra | 18:13 | |
*** e0ne has quit IRC | 18:14 | |
*** todd_dsm has quit IRC | 18:18 | |
*** andreykurilin_ has joined #openstack-infra | 18:36 | |
*** e0ne has joined #openstack-infra | 18:39 | |
*** koolhead17 has quit IRC | 18:42 | |
*** MindfulMonk has left #openstack-infra | 18:43 | |
*** e0ne has quit IRC | 18:43 | |
*** hdd has quit IRC | 18:45 | |
*** pc_m has quit IRC | 18:50 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 18:53 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 18:53 |
mordred | jeblair: I think I've captured what we know and can do with puppet there ^^ | 18:53 |
mordred | jeblair: I'm unpleased with teh level of indirection needed to deal with the composability and iptables - but that's just puppet being crazypants | 18:53 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 19:00 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 19:00 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Split haveged into its own class https://review.openstack.org/129487 | 19:00 |
*** ihrachyshka has joined #openstack-infra | 19:11 | |
*** yfried has joined #openstack-infra | 19:16 | |
*** e0ne has joined #openstack-infra | 19:18 | |
*** e0ne has quit IRC | 19:21 | |
*** boris-42 has joined #openstack-infra | 19:24 | |
*** dimsum_ has joined #openstack-infra | 19:26 | |
*** yfried has quit IRC | 19:28 | |
*** stevemar has joined #openstack-infra | 19:32 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 19:32 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 19:32 |
mordred | jeblair: I also tried to capture the basics of what's in the kerberos etherpad in the most recent kerberos patch | 19:32 |
*** ihrachyshka has quit IRC | 19:32 | |
*** dimsum_ has quit IRC | 19:37 | |
*** dimsum_ has joined #openstack-infra | 19:37 | |
*** dimsum_ has quit IRC | 19:42 | |
*** dimsum_ has joined #openstack-infra | 19:45 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 19:51 |
*** dimsum_ has quit IRC | 19:53 | |
*** dimsum_ has joined #openstack-infra | 19:53 | |
*** dimsum_ has quit IRC | 19:58 | |
mordred | jeblair, fungi: ^^ I have now tested that with --noop on kdc02 and kdc01 and I believe it's good | 19:58 |
mordred | jeblair: also, the kprop script that's on kdc01 is missing something which the puppet will fix (the docs are right, the script just isn't) | 19:59 |
*** sdake_ has quit IRC | 20:00 | |
*** dustins has joined #openstack-infra | 20:01 | |
*** stevemar has quit IRC | 20:03 | |
*** dimsum_ has joined #openstack-infra | 20:04 | |
*** e0ne has joined #openstack-infra | 20:04 | |
*** e0ne has quit IRC | 20:06 | |
*** dimsum_ has quit IRC | 20:07 | |
*** dimsum_ has joined #openstack-infra | 20:08 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 20:08 |
*** e0ne has joined #openstack-infra | 20:10 | |
*** e0ne has quit IRC | 20:11 | |
*** dimsum_ has quit IRC | 20:12 | |
*** dimsum_ has joined #openstack-infra | 20:20 | |
*** r1chardj0n3s_afk is now known as r1chardj0n3s | 20:27 | |
*** _nadya_ has quit IRC | 20:32 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 20:34 |
*** chuckC_ has joined #openstack-infra | 20:39 | |
mordred | you'll all be happy to know that an รค in an existing file causes puppet to complain about utf8 | 20:40 |
*** dimsum_ has quit IRC | 20:42 | |
*** dimsum_ has joined #openstack-infra | 20:43 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 20:44 |
*** dimsum_ has quit IRC | 20:47 | |
mordred | jeblair: ok. that ^^ also seems to not be broken - one note being that I took a stab at just managing UserList with puppet and triggering an restart | 20:47 |
mordred | jeblair: that may be overkill - but getting puppet to run bos addprinc commands seemed crazy, and we add new admin users to bos so infrequently that it seemed "better?" | 20:48 |
mordred | jeblair: but would love your take on that | 20:48 |
*** andreykurilin_ has quit IRC | 20:48 | |
mordred | in any case - as good as puppet noop may or may not be, the puppet stack seems to at least not be something that will delete everything or cause the baby jesus to die | 20:49 |
mordred | (well, except for having borked the ci-docs job ...) | 20:49 |
*** dizquierdo has joined #openstack-infra | 20:51 | |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config https://review.openstack.org/129444 | 20:52 |
openstackgerrit | Monty Taylor proposed a change to openstack-infra/system-config: Add AFS https://review.openstack.org/129450 | 20:52 |
*** dizquierdo_ has joined #openstack-infra | 20:55 | |
*** mfisch` has quit IRC | 20:55 | |
mordred | jeblair: also, I removed the openstack.org entry from my CellServDB, restarted AFS client and I can still access /afs/openstack.org | 20:55 |
mordred | jeblair: so I think the DNS SRV records are doing the right thing | 20:55 |
*** dizquierdo has quit IRC | 20:55 | |
*** dizquierdo_ is now known as dizquierdo | 20:56 | |
*** mfisch has joined #openstack-infra | 20:59 | |
*** mfisch is now known as Guest4574 | 20:59 | |
mordred | also - I poked tim bell to see about their use of AFS at CERN | 20:59 |
mordred | he sent me this: https://indico.cern.ch/event/271400/session/15/contribution/4/material/slides/0.pdf | 20:59 |
*** bagackiz has joined #openstack-infra | 21:03 | |
*** bagackiz has joined #openstack-infra | 21:05 | |
*** bagackiz has joined #openstack-infra | 21:06 | |
fungi | that's rather a lot of utilization | 21:06 |
*** bagackiz has quit IRC | 21:06 | |
clarkb | mordred the manpage I have for bos does not show a addprinc subcommand | 21:06 |
*** fabo has joined #openstack-infra | 21:07 | |
*** fabo has joined #openstack-infra | 21:07 | |
*** dimsum_ has joined #openstack-infra | 21:08 | |
*** bagackiz has joined #openstack-infra | 21:08 | |
* clarkb is trying to learn him an afs | 21:08 | |
clarkb | but also cooking, beering and watching football | 21:09 |
*** bagackiz has joined #openstack-infra | 21:10 | |
clarkb | fungi the chili smells and looks like chili now. I dont know how you manage to cook it overnight | 21:10 |
fungi | i don't. i rest it overnight | 21:10 |
clarkb | hrm awarm rest? | 21:11 |
clarkb | I guess you only need about 160F | 21:11 |
*** bagackiz has joined #openstack-infra | 21:11 | |
fungi | i don't cook it long at all. i roast the peppers if fresh, or toast and soak if dried (ancho, et cetera), then mash, mix with sauteed veggies, cooked corn, beans, et cetera, simmer for ~15 minutes and then cool and refrigerate for 24 hours | 21:11 |
fungi | oh, sautee the peppers in oil after mashing for about 30 minutes to cook out the bitterness too | 21:12 |
fungi | but definitely not 8 hours. that would destroy pretty much all the capsaicin | 21:13 |
*** bagackiz has joined #openstack-infra | 21:13 | |
*** bagackiz has quit IRC | 21:13 | |
clarkb | huh. I roast and peel peppers. brown meat then dump everything into low heat crockpot for 8 hours | 21:13 |
clarkb | fungi it comes out pretty fiery. it is oil right? | 21:13 |
fungi | yep | 21:14 |
fungi | depends on the peppers you use too. i'm not cooking habanero chili or anything. using mostly poblano, hatch, et cetera | 21:14 |
clarkb | anaheim and jalapeno here | 21:15 |
*** bagackiz has joined #openstack-infra | 21:15 | |
*** bagackiz has quit IRC | 21:15 | |
*** bagackiz has joined #openstack-infra | 21:16 | |
fungi | but yeah, high heat for prolonged periods breaks down capsaicin pretty quickly. i guess if you're cooking it at low temps it's less destructive | 21:17 |
clarkb | ya I tend to get a nice layer of red oil over the top that I refuse to skim | 21:17 |
*** bagackiz has joined #openstack-infra | 21:18 | |
clarkb | also bacon | 21:18 |
clarkb | I need to make cornbread too | 21:19 |
*** bagackiz has joined #openstack-infra | 21:20 | |
clarkb | your method seems like possibly less work | 21:22 |
clarkb | will need to give it a go | 21:22 |
*** bagackiz has joined #openstack-infra | 21:22 | |
*** bagackiz has quit IRC | 21:22 | |
fungi | i am all about optimizing | 21:23 |
clarkb | the nice thing about this way is I can use cheap stew meat and it comes out good | 21:23 |
fungi | ahh, right. i'm usually making bean chili instead so the stewing winds up being unnecessary | 21:28 |
*** imcsk8 has quit IRC | 21:28 | |
*** imcsk8 has joined #openstack-infra | 21:28 | |
*** dizquierdo_ has joined #openstack-infra | 21:30 | |
anteaya | I love listening to you talk recipes | 21:31 |
anteaya | you both sound like great cooks | 21:31 |
jeblair | fungi: oh you make "chili with beans" ;) | 21:32 |
clarkb | I dont know about great. there are a handful of things I can fake :) | 21:32 |
clarkb | jeblair are you from texas? | 21:32 |
clarkb | :P | 21:32 |
anteaya | clarkb: seems the crowd who eats your brisket are fairly convinced | 21:33 |
jeblair | clarkb: no, but my second-favorite chili is :) | 21:33 |
clarkb | jeblair I use beans too. I think greghaynes disapproves. but this is how I was taught | 21:33 |
*** dizquierdo has quit IRC | 21:33 | |
jeblair | oh, i read further, fungi is actually making bean (vegetarian) chili iiuc. which contrary to what i expected as a carnivore, can be really really good. | 21:35 |
fungi | yeah, i have to cook what the wife will eat--the challenge is to make it into something i also want to eat. if it were for me, it would be chunks of meat. in this case the beans add back the otherwise missing protein | 21:35 |
jeblair | i miss the hard times cafe in raleigh. their vegi chili was really good. | 21:36 |
clarkb | I will eat just about any chili if it comes with cornbread | 21:37 |
clarkb | I dont get too picky :) | 21:37 |
*** Hefeweizen has quit IRC | 21:37 | |
anteaya | clarkb: do you make your own cornbread? | 21:38 |
jhesketh | Morning | 21:38 |
anteaya | I was told the secret to corn bread is buttermilk | 21:38 |
anteaya | morning jhesketh | 21:38 |
clarkb | anteaya I buy the box mix >_> | 21:39 |
anteaya | how's turbo hipster feeling today | 21:39 |
anteaya | clarkb: ah | 21:39 |
clarkb | trader joes has a mix with whole kernels in it | 21:39 |
anteaya | nice | 21:39 |
anteaya | I like trader joes | 21:39 |
*** sabeen1 has quit IRC | 21:39 | |
clarkb | I find it makes a great cornbread so dont bother with extra effort | 21:39 |
*** ayoung has joined #openstack-infra | 21:40 | |
jhesketh | anteaya: looks to be behaving | 21:41 |
anteaya | jhesketh: good news | 21:42 |
anteaya | clarkb: you can't beat a mix that makes a good end result | 21:42 |
*** bagackiz has joined #openstack-infra | 21:45 | |
*** bagackiz has quit IRC | 21:45 | |
*** arnaud has joined #openstack-infra | 21:45 | |
*** bagackiz has joined #openstack-infra | 21:47 | |
*** bagackiz has quit IRC | 21:47 | |
clarkb | yup its a super useful hack | 21:48 |
*** bagackiz has joined #openstack-infra | 21:52 | |
*** bagackiz has quit IRC | 21:52 | |
*** bagackiz has joined #openstack-infra | 21:54 | |
*** bagackiz has quit IRC | 21:54 | |
mordred | fungi: whoops. what I meant was "bos adduser" | 21:54 |
mordred | fungi: it's kadmin addprinc | 21:54 |
*** pc_m has joined #openstack-infra | 21:54 | |
* mordred just ate leftovers, so has no good cooking stories to share | 21:55 | |
*** pcm_ has joined #openstack-infra | 21:55 | |
*** ivar-lazzaro has joined #openstack-infra | 21:56 | |
*** ivar-lazzaro has joined #openstack-infra | 21:57 | |
fungi | mordred: yep, found it in the openafs server install guide | 21:57 |
fungi | huh. board meeting tomorrow | 21:58 |
mordred | yeah. should be fun | 21:59 |
*** pc_m has quit IRC | 21:59 | |
*** bagackiz has joined #openstack-infra | 22:01 | |
*** bagackiz has quit IRC | 22:01 | |
*** bagackiz has joined #openstack-infra | 22:02 | |
*** bagackiz has quit IRC | 22:02 | |
*** bagackiz has joined #openstack-infra | 22:04 | |
*** bagackiz has quit IRC | 22:04 | |
*** bagackiz has joined #openstack-infra | 22:06 | |
*** bagackiz has quit IRC | 22:06 | |
*** bagackiz has joined #openstack-infra | 22:07 | |
*** bagackiz has quit IRC | 22:07 | |
mordred | jeblair: so - I just was googling to see if anyone else had build a transactional/atomic debian archive mirror using AFS like we've discussed | 22:08 |
mordred | jeblair: turns out that an IRC conversation between us is the third thing that shows up | 22:08 |
mordred | so I'm going to say "no" | 22:08 |
*** bagackiz has joined #openstack-infra | 22:09 | |
*** bagackiz has quit IRC | 22:09 | |
*** bagackiz has joined #openstack-infra | 22:11 | |
*** bagackiz has quit IRC | 22:11 | |
anteaya | an it looks like bagackiz is our current contestant in "spam the channel with your disconnecting client" | 22:12 |
*** bagackiz has joined #openstack-infra | 22:12 | |
*** bagackiz has quit IRC | 22:12 | |
anteaya | lets see how long this contestant is willing to play | 22:12 |
*** ChanServ sets mode: +o mordred | 22:13 | |
*** mordred sets mode: +b *!*@*PanicBNC.org | 22:14 | |
mordred | nope | 22:14 |
anteaya | mordred: thank you | 22:15 |
mordred | anteaya: do you have the weechat? | 22:15 |
anteaya | I have the weechat | 22:15 |
mordred | do you know about alt-= ? | 22:16 |
anteaya | no | 22:16 |
mordred | I'm about to be your new best friend | 22:16 |
mordred | press it | 22:16 |
anteaya | what should I know about alt-= | 22:16 |
anteaya | you already are | 22:16 |
mordred | yay! | 22:16 |
mordred | anteaya: alt-= toggles the smartfilter stuff | 22:16 |
anteaya | okay | 22:16 |
mordred | anteaya: so it'll make all of the join/parts go away | 22:16 |
anteaya | I see not change | 22:16 |
anteaya | ah | 22:16 |
anteaya | which is fine for me | 22:16 |
anteaya | though that does not help me advocate for those without the weechat | 22:17 |
mordred | clarkb: why did alt-= not do things for anteaya ? | 22:17 |
mordred | anteaya: it's possible you have to enable smartfilter first ... | 22:17 |
anteaya | it has | 22:17 |
mordred | oh! it did? great | 22:17 |
anteaya | I see no more join/parts | 22:17 |
mordred | woot | 22:17 |
mordred | I like that it's easily toggleable | 22:18 |
mordred | because sometimes I need to see that | 22:18 |
mordred | but most of the time I'm not interested | 22:18 |
anteaya | but what I am saying is that fixing join/parts for me doesn't help my goal in being a good advocate for those without the weechat | 22:18 |
anteaya | right | 22:18 |
anteaya | makes sense | 22:18 |
* anteaya toggles again | 22:18 | |
mordred | gotcha | 22:18 |
anteaya | and thanks | 22:18 |
anteaya | you were and still are my new best friend | 22:19 |
anteaya | :D | 22:19 |
mordred | I agree - it would not be a thing that would allow you to achieve that goal | 22:19 |
mordred | yay! | 22:19 |
anteaya | \o/ | 22:19 |
clarkb | ya you have to enable smartfilters | 22:20 |
anteaya | oh | 22:20 |
anteaya | it seems there have been no join/parts in the log for me to see anyway | 22:20 |
anteaya | how do I enable smartfilters? | 22:20 |
* anteaya is reading http://help.lockergnome.com/linux/Bug-632601-weechat-smart-filter-join-part-quit-messages-defa--ftopict539593.html | 22:22 | |
anteaya | ah http://www.weechat.org/files/doc/weechat_faq.en.html#filter_irc_join_part_quit | 22:22 |
*** rlandy has quit IRC | 22:24 | |
*** alexpilotti has joined #openstack-infra | 22:26 | |
*** dimsum_ has quit IRC | 22:28 | |
*** dimsum_ has joined #openstack-infra | 22:28 | |
anteaya | thanks, it is enabled now | 22:31 |
*** dimsum_ has quit IRC | 22:32 | |
*** dimsum_ has joined #openstack-infra | 22:34 | |
*** pcm_ has quit IRC | 22:39 | |
*** changbl has joined #openstack-infra | 22:43 | |
*** dizquierdo_ has quit IRC | 22:48 | |
*** msabramo has quit IRC | 22:48 | |
*** alexpilotti has quit IRC | 22:50 | |
openstackgerrit | Russell Sim proposed a change to openstack-infra/jenkins-job-builder: Print context when key fails to be formatted https://review.openstack.org/129492 | 22:54 |
*** yamamoto has joined #openstack-infra | 22:56 | |
*** alexpilotti has joined #openstack-infra | 22:57 | |
*** HeOS has quit IRC | 22:57 | |
*** HeOS has joined #openstack-infra | 22:59 | |
*** camunoz has joined #openstack-infra | 23:08 | |
*** arnaud has quit IRC | 23:10 | |
*** koolhead17 has joined #openstack-infra | 23:33 | |
*** dustins has quit IRC | 23:35 | |
ianw | pleia2: probably should just fork puppetlabs-apache and call it something else, unless someone wants to go an translate all the custom templates currently there into puppetese | 23:36 |
*** stevemar has joined #openstack-infra | 23:40 | |
*** sdake_ has joined #openstack-infra | 23:43 | |
mordred | ianw: we keep talking about wanting to get off of our fork | 23:49 |
openstackgerrit | Angus Lees proposed a change to openstack-infra/project-config: Add pylint check for neutron https://review.openstack.org/129493 | 23:51 |
pleia2 | mordred: yeah, ianw was about 7 patchsets in to getting back with upstream last week before the Abandoned button was hit :\ | 23:51 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!