Friday, 2017-06-09

jeblairclarkb: though it means a delay before new things are available00:00
clarkbya00:00
jeblairclarkb: one idea might be to release less frequently, unless there is a change to a package in g-r.00:00
*** thorst_afk has joined #openstack-infra00:00
clarkbjeblair: will vos release nop if nothing changed? eg do we already handle the trivial case when bandersnatch doesn't update anything? I guess thats part of what I can test tomorrow00:00
jeblairclarkb: i'm not certain.  good thing to test.00:01
jeblairclarkb: (but also, i don't know if our script short-circuits in that case either)00:02
*** jamielennox|away is now known as jamielennox00:02
*** gomarivera has joined #openstack-infra00:02
jeblairclarkb: i do know that we release almost every 5 minutes because *something* is always changing on pypi.00:02
clarkbya pypi is chatty00:03
*** gildub has joined #openstack-infra00:05
*** gomarivera has quit IRC00:06
*** armax has quit IRC00:11
*** sflanigan has joined #openstack-infra00:13
*** dfflanders has joined #openstack-infra00:17
*** spzala has joined #openstack-infra00:21
*** spzala has quit IRC00:26
*** dfflanders has quit IRC00:27
*** esberglu has joined #openstack-infra00:28
*** hamzy has joined #openstack-infra00:28
openstackgerritMerged openstack/diskimage-builder master: Don't make image & loopdev functions static  https://review.openstack.org/47084500:32
*** esberglu has quit IRC00:32
*** thorst_afk has quit IRC00:33
*** sbezverk has joined #openstack-infra00:34
*** deafult has joined #openstack-infra00:36
*** spzala has joined #openstack-infra00:38
*** rkukura has quit IRC00:41
*** thorst_afk has joined #openstack-infra00:42
*** thorst_afk has quit IRC00:43
*** hongbin has quit IRC00:44
openstackgerritMerged openstack/diskimage-builder master: Use picked nodes for later cmd_* calls  https://review.openstack.org/46933000:49
*** zhurong has joined #openstack-infra00:49
openstackgerritMerged openstack/diskimage-builder master: Add state to NodeBase class  https://review.openstack.org/46974900:52
*** sree has joined #openstack-infra00:53
*** sflanigan has quit IRC00:53
*** cuongnv has joined #openstack-infra00:54
openstackgerritJamie Lennox proposed openstack-infra/zuul feature/zuulv3: Store cache expiry times per status object  https://review.openstack.org/46133000:57
openstackgerritJamie Lennox proposed openstack-infra/zuul feature/zuulv3: Use routes for URL handling in webapp  https://review.openstack.org/46133100:57
openstackgerritJamie Lennox proposed openstack-infra/zuul feature/zuulv3: Use tenant_name to look up project key  https://review.openstack.org/46133200:57
*** jamielennox is now known as jamielennox|away01:00
*** aeng has quit IRC01:03
*** jamielennox|away is now known as jamielennox01:10
*** sflanigan has joined #openstack-infra01:10
*** sflanigan has joined #openstack-infra01:11
*** thorst_afk has joined #openstack-infra01:14
*** aeng has joined #openstack-infra01:20
*** liujiong has joined #openstack-infra01:22
*** sree has quit IRC01:23
*** sbezverk has quit IRC01:23
*** LindaWang has joined #openstack-infra01:24
*** bobh has joined #openstack-infra01:25
*** Apoorva_ has joined #openstack-infra01:29
*** zhurong has quit IRC01:29
*** Apoorva_ has quit IRC01:29
*** spzala has quit IRC01:30
*** nunchuck has joined #openstack-infra01:30
*** thorst_afk has quit IRC01:31
*** armax has joined #openstack-infra01:32
*** Apoorva has quit IRC01:32
*** bobh has quit IRC01:34
*** gardlt has joined #openstack-infra01:34
*** aeng_ has joined #openstack-infra01:35
*** markvoelker has joined #openstack-infra01:35
openstackgerritMerged openstack/diskimage-builder master: Remove 'state' argument from later cmd_* calls  https://review.openstack.org/46975001:36
*** aeng has quit IRC01:37
*** namnh has joined #openstack-infra01:37
*** thorst_afk has joined #openstack-infra01:38
*** dave-mccowan has joined #openstack-infra01:38
openstackgerritMerged openstack/diskimage-builder master: Use global state to check for duplicate fs labels  https://review.openstack.org/46975101:41
*** tuanluong has joined #openstack-infra01:43
openstackgerritMerged openstack/diskimage-builder master: Move global mount tracking into state  https://review.openstack.org/46975201:44
*** thorst_afk has quit IRC01:44
*** r-daneel has quit IRC01:47
openstackgerritMerged openstack/diskimage-builder master: Move rollback into NodeBase object  https://review.openstack.org/46410501:48
openstackgerritMerged openstack/diskimage-builder master: Pass all blockdevices to bootloader  https://review.openstack.org/47118301:49
*** ramishra has joined #openstack-infra01:52
*** Julien-zte has joined #openstack-infra01:53
openstackgerritMerged openstack/diskimage-builder master: PPC bootloader; install to boot partition  https://review.openstack.org/47152501:53
*** rlandy has quit IRC01:54
*** dhinesh has quit IRC01:56
*** EricGonczer_ has quit IRC01:59
*** zhurong has joined #openstack-infra02:04
*** esberglu has joined #openstack-infra02:06
*** thorst_afk has joined #openstack-infra02:06
*** thorst_afk has quit IRC02:06
*** markvoelker has quit IRC02:09
*** esberglu has quit IRC02:10
openstackgerritSagi Shnaidman proposed openstack-infra/tripleo-ci master: DONT REVIEW: test image building  https://review.openstack.org/45978602:20
*** hongbin has joined #openstack-infra02:23
openstackgerritSagi Shnaidman proposed openstack-infra/tripleo-ci master: DONT REVIEW: test image building  https://review.openstack.org/45978602:25
*** jamesmcarthur has joined #openstack-infra02:26
*** hongbin has quit IRC02:27
*** hongbin has joined #openstack-infra02:28
*** jamesmcarthur has quit IRC02:31
*** dimtruck is now known as zz_dimtruck02:31
openstackgerritSagi Shnaidman proposed openstack-infra/project-config master: Add tempest OOOQ job to experimental for tripleo  https://review.openstack.org/47249902:33
*** deafult has quit IRC02:33
openstackgerritSaad Zaher proposed openstack-infra/project-config master: Added OpenStack-ansible repos for freezer  https://review.openstack.org/46993802:33
*** mriedem has joined #openstack-infra02:34
*** thorst_afk has joined #openstack-infra02:37
*** knangia_ has quit IRC02:38
*** markvoelker has joined #openstack-infra02:44
openstackgerritSaad Zaher proposed openstack-infra/project-config master: Added Freezer OpenStack-ansible repo  https://review.openstack.org/46993802:47
*** thorst_afk has quit IRC02:48
*** zz_dimtruck is now known as dimtruck02:52
*** spzala has joined #openstack-infra02:53
*** spzala_ has joined #openstack-infra02:53
*** spzala has quit IRC02:53
*** sflanigan is now known as sflanigan_afk02:53
*** larainema has quit IRC03:02
*** yamamoto has joined #openstack-infra03:07
*** sflanigan_afk is now known as sflanigan03:10
*** dimtruck is now known as zz_dimtruck03:12
*** larainema has joined #openstack-infra03:13
namnhhi everyone, could you please review this patch: https://review.openstack.org/#/c/472153/03:14
*** xarses_ has quit IRC03:18
*** rfolco has joined #openstack-infra03:19
*** rfolco has quit IRC03:19
*** salv-orlando has joined #openstack-infra03:21
*** salv-orlando has quit IRC03:26
*** jcoufal has joined #openstack-infra03:26
*** bobh has joined #openstack-infra03:29
*** zz_dimtruck is now known as dimtruck03:34
*** sree has joined #openstack-infra03:41
*** sree has quit IRC03:43
*** bobh has quit IRC03:43
*** sree has joined #openstack-infra03:43
*** Julien-zte has quit IRC03:44
openstackgerritOpenStack Proposal Bot proposed openstack/diskimage-builder master: Updated from global requirements  https://review.openstack.org/47207703:44
*** bobh has joined #openstack-infra03:45
*** thorst_afk has joined #openstack-infra03:45
*** bobh has quit IRC03:45
*** bobh has joined #openstack-infra03:47
*** dave-mccowan has quit IRC03:47
*** bobh has quit IRC03:50
*** esberglu has joined #openstack-infra03:54
*** dimtruck is now known as zz_dimtruck03:54
*** esberglu has quit IRC03:59
*** spzala_ has quit IRC04:00
*** dingyichen has joined #openstack-infra04:03
*** thorst_afk has quit IRC04:04
*** hongbin has quit IRC04:11
*** zz_dimtruck is now known as dimtruck04:16
*** spzala has joined #openstack-infra04:17
*** links has joined #openstack-infra04:20
*** jcoufal has quit IRC04:20
*** spzala has quit IRC04:21
*** salv-orlando has joined #openstack-infra04:22
*** zhurong has quit IRC04:25
*** salv-orlando has quit IRC04:26
*** mriedem has quit IRC04:27
*** psachin has joined #openstack-infra04:31
*** zhurong has joined #openstack-infra04:34
*** vikrant has joined #openstack-infra04:37
*** dhajare|busy has joined #openstack-infra04:42
*** Hal has joined #openstack-infra04:42
*** yamamoto_ has joined #openstack-infra04:43
*** salv-orlando has joined #openstack-infra04:44
*** yamamoto has quit IRC04:47
*** gyee has quit IRC04:49
*** dimtruck is now known as zz_dimtruck04:50
*** dhinesh has joined #openstack-infra04:53
*** ramishra has quit IRC04:55
*** claudiub has joined #openstack-infra04:55
*** dhajare|busy has quit IRC04:56
*** ramishra has joined #openstack-infra04:57
*** spzala has joined #openstack-infra04:58
*** spzala has quit IRC05:03
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [WIP] LVM support for dib-block-device  https://review.openstack.org/47206505:03
*** gardlt has quit IRC05:05
*** Guest72612 has quit IRC05:06
*** med_ has joined #openstack-infra05:06
*** gardlt has joined #openstack-infra05:06
*** med_ is now known as Guest651105:06
*** ykarel has joined #openstack-infra05:07
*** links has quit IRC05:10
*** xarses has joined #openstack-infra05:10
*** gardlt has quit IRC05:10
*** zz_dimtruck is now known as dimtruck05:12
*** prateek has joined #openstack-infra05:12
*** xarses has quit IRC05:16
*** gomarivera has joined #openstack-infra05:24
*** links has joined #openstack-infra05:26
*** dimtruck is now known as zz_dimtruck05:27
*** gomarivera has quit IRC05:28
*** yamahata has joined #openstack-infra05:29
*** armax has quit IRC05:29
*** dhajare|busy has joined #openstack-infra05:30
*** spzala has joined #openstack-infra05:33
*** spzala has quit IRC05:38
*** pgadiya has joined #openstack-infra05:41
*** aeng_ has quit IRC05:42
*** esberglu has joined #openstack-infra05:42
*** pgadiya has quit IRC05:44
*** puiterwijk is now known as puiterwijk|pto05:44
*** dhinesh has quit IRC05:46
*** esberglu has quit IRC05:46
*** cshastri has joined #openstack-infra05:48
*** puiterwijk|pto is now known as puiterwijk05:51
*** Julien-zte has joined #openstack-infra05:54
*** nicolasbock has joined #openstack-infra05:57
*** dingyichen has quit IRC05:59
*** thorst_afk has joined #openstack-infra06:02
*** nicolasbock has quit IRC06:02
*** thorst_afk has quit IRC06:06
*** pgadiya has joined #openstack-infra06:07
*** spzala has joined #openstack-infra06:13
*** Hal has quit IRC06:15
EmilienMyolanda: hey, sounds like gerrit is sending 502 proxy errors06:16
EmilienMianw: ^ fyi06:16
*** spzala has quit IRC06:18
*** jaosorior has joined #openstack-infra06:18
*** gildub has quit IRC06:25
EmilienMinfra-root: gerrit server is unavailable06:26
*** jamesmcarthur has joined #openstack-infra06:27
*** eumel8 has joined #openstack-infra06:27
*** jbadiapa_ has quit IRC06:28
eumel8good morning. It seems https://review.openstack.org is down06:31
*** jamesmcarthur has quit IRC06:31
*** iogg has joined #openstack-infra06:31
ianwtaking a look06:32
eumel8thx06:33
ianwit's pegged at 100% cpu06:33
eumel8proxy error 50206:33
ianwjava.io.IOException: Too many open files06:34
*** JudeC has joined #openstack-infra06:35
*** ltomasbo|away is now known as ltomasbo06:35
EmilienMmaybe a restart?06:35
ianwok, restarted it ... not sure what the root cause was06:37
EmilienMthanks ianw !06:37
ianwopenstack-ubuntu-testing-bot ... if anyone owns that, it's failing to connect every few seconds06:37
eumel8service is back06:38
ianwcastanos@us.ibm.com also06:38
eumel8quick running06:38
ianwthe error log is up to 15gb, so ... yeah ... unhappy for a while i guess06:39
*** xarses has joined #openstack-infra06:40
*** xarses has quit IRC06:41
openstackgerritEmilien Macchi proposed openstack-infra/project-config master: enable voting on tripleo-containers-ovb  https://review.openstack.org/47253606:41
*** xarses has joined #openstack-infra06:41
ianwthere is a rather worrying consistent "java.io.IOException: Connection reset by peer" coming up in the logs ever few seconds06:41
*** florianf has joined #openstack-infra06:42
*** yamahata has quit IRC06:43
ianwrussellb: do you have something in a tight loop polling gerrit every few seconds too?06:45
*** salv-orlando has quit IRC06:52
EmilienMianw: yes, I think he still runs http://russellbryant.net/openstack-stats/06:52
EmilienMlooking at file timestamps, it's running06:52
*** salv-orlando has joined #openstack-infra06:52
*** tesseract has joined #openstack-infra06:53
ianwahh, that would explain it i guess06:53
EmilienMit sounds like it runs ~ every hour or so06:53
*** zz_dimtruck is now known as dimtruck06:53
ianwi may have just caught it when it was busy06:54
*** zhurong has quit IRC06:55
*** spzala has joined #openstack-infra06:55
*** zhurong has joined #openstack-infra06:56
*** shardy has joined #openstack-infra06:56
*** zhurong has quit IRC06:57
*** jascott1_ has quit IRC06:59
*** spzala has quit IRC06:59
*** jascott1 has joined #openstack-infra07:00
*** pgadiya has quit IRC07:02
*** thorst_afk has joined #openstack-infra07:03
*** dimtruck is now known as zz_dimtruck07:03
*** jascott1 has quit IRC07:04
*** pcaruana has joined #openstack-infra07:05
*** thorst_afk has quit IRC07:07
*** amoralej|off is now known as amoralej07:07
*** niska has quit IRC07:07
*** jani has left #openstack-infra07:08
*** markvoelker has quit IRC07:08
*** links has quit IRC07:09
*** rcernin has joined #openstack-infra07:09
*** spzala has joined #openstack-infra07:11
*** niska has joined #openstack-infra07:15
*** spzala has quit IRC07:16
*** ralonsoh has joined #openstack-infra07:16
*** ihrachys has quit IRC07:17
*** pgadiya has joined #openstack-infra07:18
*** aviau has quit IRC07:19
*** pahuang has quit IRC07:19
*** aviau has joined #openstack-infra07:19
*** links has joined #openstack-infra07:25
*** jpena|off is now known as jpena07:30
*** rossella__ has joined #openstack-infra07:30
*** esberglu has joined #openstack-infra07:30
*** rossella_ has joined #openstack-infra07:33
*** esberglu has quit IRC07:34
*** rossella__ has quit IRC07:34
*** yamamoto_ has quit IRC07:38
*** rossella__ has joined #openstack-infra07:39
*** rossella_ has quit IRC07:40
jamespageianw: hmm I own that account (openstack-ubuntu-testing-bot)07:47
*** JudeC has quit IRC07:49
*** mhickey has joined #openstack-infra07:50
*** mandre is now known as mandre|away07:51
*** rossella__ has quit IRC07:52
*** zz_dimtruck is now known as dimtruck07:54
*** jpich has joined #openstack-infra07:55
*** yamamoto has joined #openstack-infra07:57
*** namnh has quit IRC07:58
*** yamamoto has quit IRC07:59
*** yamamoto has joined #openstack-infra07:59
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-infra08:00
*** markus_z has joined #openstack-infra08:01
openstackgerritAlfredo Moralejo proposed openstack-infra/tripleo-ci master: DNM: testing something for gate  https://review.openstack.org/47136108:03
*** spzala has joined #openstack-infra08:03
*** thorst_afk has joined #openstack-infra08:03
*** dimtruck is now known as zz_dimtruck08:04
*** jbadiapa_ has joined #openstack-infra08:05
*** rossella__ has joined #openstack-infra08:06
*** eumel8 has quit IRC08:06
*** spzala has quit IRC08:07
*** lucas-afk is now known as lucasagomes08:11
*** rossella__ has quit IRC08:13
*** sflanigan has quit IRC08:13
*** ramishra has quit IRC08:18
*** ramishra has joined #openstack-infra08:19
*** ramishra has quit IRC08:20
*** thorst_afk has quit IRC08:23
*** ramishra has joined #openstack-infra08:24
*** ramishra has quit IRC08:25
*** panda|off is now known as panda08:26
*** pgadiya has quit IRC08:26
*** electrofelix has joined #openstack-infra08:27
*** spzala has joined #openstack-infra08:29
*** Julien-zte has quit IRC08:32
*** spzala has quit IRC08:34
openstackgerritTristan Cacqueray proposed openstack-infra/openstack-zuul-jobs master: Add tox/py34 job  https://review.openstack.org/47258308:40
*** yamamoto_ has joined #openstack-infra08:46
*** tosky has joined #openstack-infra08:46
*** derekh has joined #openstack-infra08:47
*** yamamoto has quit IRC08:47
*** dtantsur|sick is now known as dtantsur08:48
*** bauzas is now known as bauwser08:52
*** zz_dimtruck is now known as dimtruck08:55
*** dalvarezs is now known as dalvarez09:00
*** spzala has joined #openstack-infra09:00
*** yamamoto_ has quit IRC09:03
*** dimtruck is now known as zz_dimtruck09:05
*** spzala has quit IRC09:05
*** e0ne has joined #openstack-infra09:05
*** yamamoto has joined #openstack-infra09:07
*** neiljerram has joined #openstack-infra09:07
*** hashar has joined #openstack-infra09:09
*** mika has quit IRC09:12
*** mika has joined #openstack-infra09:12
*** mika has joined #openstack-infra09:12
*** markvoelker has joined #openstack-infra09:13
openstackgerritSpyros Trigazis (strigazi) proposed openstack-infra/project-config master: [magnum] Add experimental dcos job  https://review.openstack.org/47177609:15
strigaziianw Can you have a look at ^^09:15
strigaziany other infra core ^^09:15
*** yamamoto has quit IRC09:16
*** dizquierdo has joined #openstack-infra09:17
*** esberglu has joined #openstack-infra09:18
*** thorst_afk has joined #openstack-infra09:20
*** ltomasbo is now known as ltomasbo|away09:20
*** ltomasbo|away is now known as ltomasbo09:22
*** esberglu has quit IRC09:23
*** hashar has quit IRC09:23
*** mandre|away is now known as mandre09:23
*** neiljerram has quit IRC09:24
*** thorst_afk has quit IRC09:24
*** jamesmcarthur has joined #openstack-infra09:27
*** spzala has joined #openstack-infra09:27
*** florianf has quit IRC09:28
*** jamesmcarthur has quit IRC09:32
*** spzala has quit IRC09:32
*** MatthewLi has quit IRC09:34
*** yamamoto has joined #openstack-infra09:37
*** LindaWang has quit IRC09:37
*** yamamoto_ has joined #openstack-infra09:38
*** yamamoto has quit IRC09:38
*** Julien-zte has joined #openstack-infra09:39
*** hashar has joined #openstack-infra09:40
*** ramishra has joined #openstack-infra09:40
*** markvoelker has quit IRC09:42
*** florianf has joined #openstack-infra09:44
*** Julien-zte has quit IRC09:48
*** Julien-zte has joined #openstack-infra09:49
*** links has quit IRC09:51
*** liujiong has quit IRC09:52
*** sree has quit IRC09:52
*** neiljerram has joined #openstack-infra09:54
*** zhurong has joined #openstack-infra09:55
*** zz_dimtruck is now known as dimtruck09:56
*** spzala has joined #openstack-infra09:59
*** Julien-zte has quit IRC09:59
*** sree has joined #openstack-infra10:01
*** namnh has joined #openstack-infra10:03
*** links has joined #openstack-infra10:03
*** spzala has quit IRC10:04
*** sambetts|afk is now known as sambetts10:04
*** sree has quit IRC10:05
*** dimtruck is now known as zz_dimtruck10:05
Dinesh_BhorHi all, can anyone point me to the doc which explains how we can create an external CI job and trigger it if any patch submitted to the gerrit?10:06
*** dizquierdo has quit IRC10:06
*** zhurong has quit IRC10:06
*** dizquierdo has joined #openstack-infra10:10
*** wolverineav has joined #openstack-infra10:14
*** dizquierdo has quit IRC10:14
*** Julien-zte has joined #openstack-infra10:17
*** hashar has quit IRC10:18
*** sdague has joined #openstack-infra10:20
*** vikrant has quit IRC10:21
openstackgerritAlfredo Moralejo proposed openstack-infra/tripleo-ci master: DNM: testing something for gate  https://review.openstack.org/47136110:25
*** neiljerram has quit IRC10:25
*** spzala has joined #openstack-infra10:27
amoralejpabelanger, let me know when you are online please10:28
*** spzala has quit IRC10:32
*** zz_dimtruck is now known as dimtruck10:35
*** markvoelker has joined #openstack-infra10:39
*** mpaolino has joined #openstack-infra10:41
*** salv-orlando has quit IRC10:42
*** salv-orlando has joined #openstack-infra10:43
*** pgadiya has joined #openstack-infra10:43
*** mpaolino has quit IRC10:45
*** dimtruck is now known as zz_dimtruck10:45
*** jamesdenton has joined #openstack-infra10:45
*** nicolasbock has joined #openstack-infra10:45
*** salv-orlando has quit IRC10:47
tusharDinesh_Bhor : https://docs.openstack.org/infra/openstackci/third_party_ci.html10:51
jamespageanyone around who could review https://review.openstack.org/#/c/472270/ for me? can't move forward on tempest testing for nova-lxd right now without that10:54
Dinesh_Bhortushar: great,  thanks a lot10:56
*** spzala has joined #openstack-infra10:58
*** jkilpatr has joined #openstack-infra10:59
*** jascott1 has joined #openstack-infra11:01
*** spzala has quit IRC11:02
*** gomarivera has joined #openstack-infra11:03
*** tuanluong has quit IRC11:04
*** lucasagomes is now known as lucas-hungry11:05
*** jascott1 has quit IRC11:06
*** gomarivera has quit IRC11:07
*** mat128 has joined #openstack-infra11:08
*** psachin has quit IRC11:13
*** markvoelker has quit IRC11:13
openstackgerritDaniel Mellado proposed openstack-infra/project-config master: Add kuryr-tempest-plugin project  https://review.openstack.org/47264511:22
*** jamesdenton has quit IRC11:23
*** jamesdenton has joined #openstack-infra11:24
*** spzala has joined #openstack-infra11:29
*** iogg has quit IRC11:30
*** iogg has joined #openstack-infra11:30
*** ccamacho is now known as ccamacho|lunch11:33
*** mugsie has quit IRC11:34
*** spzala has quit IRC11:34
*** zz_dimtruck is now known as dimtruck11:36
*** mugsie has joined #openstack-infra11:36
*** mugsie has quit IRC11:36
*** mugsie has joined #openstack-infra11:36
*** pgadiya has quit IRC11:38
*** Julien-zte has quit IRC11:39
*** dizquierdo has joined #openstack-infra11:40
*** yamamoto_ has quit IRC11:42
*** yamamoto has joined #openstack-infra11:43
*** abishop has joined #openstack-infra11:43
openstackgerritMerged openstack-infra/project-config master: Increase nova-lxd functional test timeout  https://review.openstack.org/47227011:45
*** dimtruck is now known as zz_dimtruck11:45
openstackgerritMerged openstack-infra/project-config master: Add seperate pep8 job for Browbeat  https://review.openstack.org/47095311:48
openstackgerritMerged openstack-infra/project-config master: Add neutron periodic job with ryu master  https://review.openstack.org/46788511:51
*** ldnunes has joined #openstack-infra11:54
*** namnh has quit IRC11:55
ianwjamespage: thanks.  i don't really think gerrit feels it at all, just when a human tails the logs you see these constant repeated login attempts :)11:55
jamespageianw: the jenkins running that activity was not actually using the gerrit stream so I turned it off11:55
jamespageianw: I think it was a leftover from when we had pre-landing package build tests running for core openstack projects11:56
jamespageianw: but that generated alot of noise for developers, and alot of load for the supporting infra11:56
*** gcb has quit IRC11:57
*** thorst_afk has joined #openstack-infra11:59
*** spzala has joined #openstack-infra12:00
*** katkapilatova has joined #openstack-infra12:02
*** askb has quit IRC12:02
*** xarses has quit IRC12:03
*** spzala has quit IRC12:04
*** lucas-hungry is now known as lucasagomes12:05
amoralejhi infra12:05
amoraleji need some help to debug an issue we have been working on for some days without success.12:05
amoraleji'd like to get a node hold and get access into it12:06
amoralejpabelanger, helped me yesterday, but it seems he is not online yet12:06
amoralejanyone could help me?12:06
*** shardy has quit IRC12:08
EmilienMamoralej: you would likely get some help when fungi or pabelanger are online12:08
amoralejthanks EmilienM12:09
*** markvoelker has joined #openstack-infra12:10
*** mugsie has quit IRC12:10
*** ldnunes has quit IRC12:12
*** mugsie has joined #openstack-infra12:12
*** mugsie has quit IRC12:12
*** mugsie has joined #openstack-infra12:12
*** trown|outtypewww is now known as trown12:12
*** xarses has joined #openstack-infra12:13
*** jcoufal has joined #openstack-infra12:14
*** xarses_ has joined #openstack-infra12:14
*** xarses_ has quit IRC12:14
*** xarses_ has joined #openstack-infra12:14
*** shardy has joined #openstack-infra12:17
*** xarses has quit IRC12:18
*** bobh has joined #openstack-infra12:18
*** dizquierdo has quit IRC12:22
*** ramishra has quit IRC12:23
*** HeOS has joined #openstack-infra12:24
*** abishop has left #openstack-infra12:24
*** ldnunes has joined #openstack-infra12:25
*** rlandy has joined #openstack-infra12:25
*** bobh has quit IRC12:27
*** spzala has joined #openstack-infra12:28
*** jpena is now known as jpena|lunch12:28
*** amoralej is now known as amoralej|lunch12:29
*** yland has joined #openstack-infra12:31
*** spzala has quit IRC12:33
*** markvoelker has quit IRC12:36
*** markvoelker has joined #openstack-infra12:36
*** zz_dimtruck is now known as dimtruck12:36
*** jaosorior has quit IRC12:37
*** gordc has joined #openstack-infra12:38
*** trown is now known as trown|afk12:40
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool feature/zuulv3: Add webapp port and listen_address configuration  https://review.openstack.org/47212812:41
*** Julien-zte has joined #openstack-infra12:42
*** dave-mccowan has joined #openstack-infra12:43
*** EricGonczer_ has joined #openstack-infra12:43
openstackgerritDaniel Mellado proposed openstack-infra/project-config master: Add kuryr-tempest-plugin project  https://review.openstack.org/47264512:43
*** shardy has quit IRC12:43
*** dimtruck is now known as zz_dimtruck12:46
pabelangeramoralej|lunch: EmilienM: usually just better to ask for something, then waiting for a person to come online. Everybody mostly reads backscoll.12:48
pabelangerwhat do you need help with today12:48
*** links has quit IRC12:48
*** ccamacho|lunch is now known as ccamacho12:49
tusharPabelanger : Hi12:50
tusharPablanger : In nodepool creation getting failed for me. error log -https://gist.github.com/anonymous/c77476be4c7b5565726922504131447412:51
*** baoli has joined #openstack-infra12:51
*** baoli_ has joined #openstack-infra12:52
pabelangertushar: are you using the initialize-urandom / runtime-ssh-host-keys elements?12:53
pabelangertushar: that error to me means there is something wrong with SSH12:53
tusharPabelanger : yes, using initialize-urandom12:53
pabelangertushar: you might need to get the console log from openstack command to see what services have been properly started12:54
pabelangeropenstack console log show <instance>12:54
pabelangernewer versions of nodepool we have a console-log: True setting that make things a little easier12:54
tusharPabelanger : console log should be taken  from the provider or the server on which nodepool is running?12:56
*** baoli has quit IRC12:56
*** shardy has joined #openstack-infra12:56
*** cuongnv has quit IRC12:57
*** ihrachys has joined #openstack-infra12:59
*** spzala has joined #openstack-infra12:59
*** kgiusti has joined #openstack-infra13:03
*** spzala has quit IRC13:03
pabelangertushar: either will work. The console log will be from the instance that nodepool is failing to launch13:03
*** yamamoto has quit IRC13:04
*** yamamoto has joined #openstack-infra13:04
tusharPabelnager : Yes, I got that log from the provider13:06
*** Goneri has joined #openstack-infra13:07
*** mugsie has quit IRC13:08
tusharPabelanger : what is the signficance of  initialize-urandom, is there any documenation where description of all the nodepool elements is there?13:08
*** mugsie has joined #openstack-infra13:11
*** mugsie has quit IRC13:11
*** mugsie has joined #openstack-infra13:11
*** mdrabe has joined #openstack-infra13:11
*** bobh has joined #openstack-infra13:11
*** dizquierdo has joined #openstack-infra13:11
*** cshen has quit IRC13:16
tusharPabelanger : console log of instance - https://gist.github.com/anonymous/b3d14d7a5cd599c0636a3d43a0eb272613:18
pabelangertushar: we had to write initialize-urandom to work around a kernel bug, it just pumps entropy to urandom. That helps SSHd generate keys13:21
pabelangertushar: are you using ubuntu or ubuntu-minimal elements?13:22
pabelangertushar: also, you should be able to manually boot the DIB from your clouds and see if you can log in13:22
pabelangertushar: are you using openssh-server element too?13:23
tusharPabelanger : We are using ubuntu13:23
tusharnot using openssh-server13:24
*** jcoufal_ has joined #openstack-infra13:24
*** cshen has joined #openstack-infra13:25
pabelangerk, you likley need that too13:25
pabelangerI should have been a dependency of elements however13:25
pabelangertushar: can you pastebin / gist your build log again13:25
pabelangertushar: you also can switch to ubuntu-minimal that is more inline with the images we build13:25
*** jcoufal has quit IRC13:27
*** sbezverk has joined #openstack-infra13:28
*** vhosakot has joined #openstack-infra13:28
*** esberglu has joined #openstack-infra13:28
*** spzala has joined #openstack-infra13:29
*** xyang1 has joined #openstack-infra13:29
*** spzala has quit IRC13:31
*** spzala has joined #openstack-infra13:31
clarkbI'm going to work on addressing the translate.openstack.org disk issue frank pointed out on the mailing list13:34
tusharPabelanger : Build log - https://gist.github.com/anonymous/e8c769925839726f6eefa0cc57fef04613:35
tusharPabelanger : these are the elements which we are using currently - https://gist.github.com/anonymous/eb1616c76267c2369ddcdb1dd9a8275713:36
tusharPabelange : I am going to replace ubuntu with ubuntu-minimal, any another change ?13:36
*** trown|afk is now known as trown13:37
*** dansmith is now known as superdan13:37
*** zz_dimtruck is now known as dimtruck13:37
*** dhajare|busy has quit IRC13:37
*** amoralej|lunch is now known as amoralej13:38
*** jpena|lunch is now known as jpena13:38
pabelangertushar: yes that, you can remove stackviz and need to add openssh-server13:38
pabelangerlet me see why that isn't default now13:38
pabelangerOh, it is there13:39
pabelangerso ya, ubuntu-minimal and stackviz can be removed13:39
tusharokk13:40
pabelangerclarkb: ack13:40
tusharPabelanger : I will try with this13:40
fungithanks clarkb!13:40
*** mriedem has joined #openstack-infra13:40
pabelangertushar: ack13:40
openstackgerritClark Boylan proposed openstack-infra/puppet-zanata master: Add cron to clean out logs  https://review.openstack.org/47268313:40
clarkbpabelanger: fungi I ran the find in ^ manually which has us back to ~55% disk free. Getting that change in should make it all automagic from now on13:41
clarkbthe server seemed to not be completely full on its disk this time around and the zanata service is running so I think that may be all we need to do. Will ask frank to confirm13:42
pabelanger+213:42
*** jamesdenton has quit IRC13:43
amoralejpabelanger, i'm going to need a new hold today, sorry but we are totally lost13:43
amoralejis that ok?13:43
openstackgerritPaul Belanger proposed openstack-infra/system-config master: Use openstack status.json file for zuulv3.o.o  https://review.openstack.org/47247513:44
pabelangerclarkb: fungi: ^ and depends-on would be helpful this morning13:44
pabelangeramoralej: sure, have you tried reproducing the issue locally? We try not rely on holding nodes too much for developer workflows.13:44
pabelangeramoralej: do you have a node id?13:45
*** ericyoung has joined #openstack-infra13:45
amoralejpabelanger, yeah, we've tried but we couldn't reproduced it13:46
pabelangerinfra-root: does anybody know anything about the autohold on gate-tempest-dsvm-neutron-full-ubuntu-xenial jobs? We have 3 of them 7 days old, can they be cleaned up?13:46
pabelangerfungi: can we also delete your post_failure debug with dmellado too?13:46
amoraleji know it's not a good practice, but it's the only way i can think of to investigate it13:46
amoraleji need to start a new job and patch it to not delete the overcloud automatically13:47
dmelladopabelanger: feel free to burn it out13:47
dmelladoat least from my side ;)13:47
pabelangeramoralej: we can hold it no problem, just don't want to depend on it too much. Since it takes capacity away13:47
pabelangerdmellado: thanks13:48
clarkbpabelanger: I want to say that job autohold may have been to try and debug the cinder lvm problems we had. Then they mysteriously went away (guessing distro packaging fixes)13:48
ianychoiclarkb, I thought you adjusted the partition but it seems that the log size incresing ratio is too high? Could u check which kind of log messages are mainly in the log file?13:48
clarkbpabelanger: so yes I think you can remove that hold13:48
pabelangerclarkb: thanks13:48
*** jcoufal_ has quit IRC13:48
clarkbianychoi: the problem is we never delete logs13:48
clarkbianychoi: wildfly's logging config rotates daily but doesn't delete anything13:49
clarkbianychoi: and it is very chatty because it reloads its config every 30 seconds or something13:49
clarkbianychoi: https://review.openstack.org/472683 should address that for us13:49
pabelangerclarkb: okay to delete the citycloud-kna1 node you used to debug private IP addresses?13:50
*** jcoufal has joined #openstack-infra13:50
fungipabelanger: i don't see the held node for the post_failure debugging, but i don't even remember what that was now13:51
*** chlong has joined #openstack-infra13:51
clarkbpabelanger: which nodeid? I have one in kna1 I am using to test the afs stuff from yesterday that I still need13:51
pabelangerclarkb: 908539213:52
fungipabelanger: i don't know about the autohold either. i didn't set it but maybe we can find it in the sudo logs?13:52
pabelangerfungi: ack, I've cleaned it up based on dmellado reply13:52
clarkbpabelanger: yes that one can be deleted13:52
pabelangerfungi: I think clarkb was the autohold, which is also removed now13:52
fungicool, thanks!13:52
*** dimtruck is now known as zz_dimtruck13:53
*** sbezverk has quit IRC13:53
fungiclarkb: i think puppet is unhappy with your escaping in 47268313:53
openstackgerritRosario Di Somma proposed openstack-infra/shade master: Convert data from raw clients to dict or list of dicts  https://review.openstack.org/47269013:53
pabelangerclarkb: is 9191322 / 9190088 / 9190626 also yours for testing? They are 1:22:56 old but didn't have a reason13:53
pabelangerjeblair: do you need 9165083 anymore also? That is currently held in bluebox-sjc113:54
clarkbpabelanger: no I've got three I am using for afs testing and all three have my name in the reason field13:54
clarkbnot sure what those others are13:54
fungiclarkb: oh, also puppet lint has introduced new rules since the last time we did anything with that repo, looks like13:55
pabelangerthanks, I'll see look and see who held them13:55
clarkbfungi: yay!13:55
pabelangerfuntime13:55
clarkbfungi: I work on getting it cleaned up13:55
clarkbI've got to take kids to a doctor's appointment mid morning then afterwards is when I intend on doing the additional testing with vos release on the pypi volume13:56
*** jaosorior has joined #openstack-infra13:56
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool feature/zuulv3: Add webapp port and listen_address configuration  https://review.openstack.org/47212813:56
fungiclarkb: eep, mutual dependency cycle noted between Cron[cleanup-wildfly-logs] and Class[Zanata::Wildfly]13:56
clarkbfungi: how13:56
clarkbOh I know13:56
clarkbugh13:56
clarkbpuppet13:56
*** rbrndt has joined #openstack-infra13:58
*** jcoufal has quit IRC13:59
bauwsergerrit is in the weeds14:00
bauwserat least when uploading14:00
fungiagain!?! ianw also saw what looked like connection pileups on gerrit overnight14:00
fungio14:00
pabelangermordred: Shrews: possible that one of you might be using the 3 held nodes in rax for zuul stream testing?14:00
clarkbya git review just told me I may be mitm'd14:00
fungii'll start trying to hunt down and block the new offender14:00
clarkbfungi: thanks14:00
bauwserfungi: "Received disconnect from 104.130.246.91: 9: sendKexInit() none of the keys appears in supported list: [ssh-dss, ssh-rsa, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521]"14:01
Shrewspabelanger: not I14:01
fungi169.48.164.163 has 4852 open connections to the api. adding to iptables now14:01
bauwserI can try connecting thru HTTP tho14:01
fungiblocked, i'm going to try to start closing the open connections from it14:01
fungiSpamapS: 169.48.164.163 seems to be another softlayer host?14:02
clarkbthat is what whois says14:03
fungimestery doesn't lurk in here any longer14:03
fungii'14:03
fungii'm tempted to block the entire netblock14:03
clarkbit would be nice if we can get them to confirm their zuul version and maybe we need to make a release to include my fix for this paramiko behavior14:03
*** jamesdenton has joined #openstack-infra14:03
*** nicolasbock has quit IRC14:03
pabelangerfungi: ++14:03
clarkbwe had whoever it was last time (I don't remember) test that the fix actually fixed it for them but guessing that softlayer is grabbing the last release which doesn't include my fix?14:04
pabelangerif they are puppet-openstackci, it should be using master branch of zuul14:04
pabelangerand 2.5.2 also includes it14:04
clarkbah ok14:04
clarkbso either the fix isn't sufficient or they are not deploying what we expect?14:04
fungiearlier this week we confirmed the paramiko bump appeared in 2.5.2, but SpamapS also said they were deploying via puppet-openstackci which installs zuul master branch tip unless you override that14:04
pabelangerclarkb: agree14:04
clarkbI was fairly happy with the fix at the time though because I know we tested it but maybe the testing didn't test what I expected14:05
*** mhickey has quit IRC14:06
fungi#status log Blocked 169.48.164.163 in iptables on review.o.o temporarily for excessive connection counts14:06
openstackstatusfungi: finished logging14:06
clarkbfungi: fwiw I would be fine blocking the entire range if this is a persistent issue and we can't get them here or via email to work through it14:06
clarkbwhat I did last time was blocked the IPs until I had interactive session in irc with individuals where we worked through the problem and confirmed that the issue was fixed14:07
fungilooks like the three softlayer ip addresses were from completely different first octets even, so unless we work them all out from bgp announcements i don't think that's a viable approach after all14:07
clarkbah14:07
*** jcoufal has joined #openstack-infra14:07
fungiand it's not like we can revoke an account to prevent this... the misconfigured hosts don't even have valid authentication set up14:08
clarkbalso you can disable the accounts14:08
clarkbbut ya that14:08
*** markus_z has quit IRC14:08
clarkbfungi: maybe we want to set up a global iptables -m connlimit rule on review.o.o?14:10
fungii've closed over 10% of the connections from that address already, so hopefully errors are ceasing14:10
clarkbor at least for port 29418, limit to say 100 connections?14:10
fungiclarkb: i wonder if the kernel actually sees that many or if it's just the jvm... checking14:10
*** zz_dimtruck is now known as dimtruck14:10
pabelangerDidn't SpamapS say it was from people testing bonnyCI things? Maybe they are defaulting some thing to review.o.o by mistake14:11
fungioh, yep, kernel sees them too. so that might work14:11
fungipabelanger: yes, the assumption is that they're using a default they shouldn't be. he confirmed they shouldn't even be trying to connect to our gerrit from those at all14:11
*** felipemonteiro has joined #openstack-infra14:12
fungiclarkb: i like the connlimit idea. happen to have the syntax handy?14:12
clarkbI think a connlimit would mitigate this well as its repeated bad connections (due to client error) from a single source that hurts us. If this was a distributed attack it would be less useful but thankfully it is single source14:12
clarkbfungi: google says https://unix.stackexchange.com/questions/139285/limit-max-connections-per-ip-address-and-new-connections-per-second-with-iptable14:13
clarkbfungi: I'm reading manpages now to see if there is a better construction for us14:13
fungiright, this is not an intentional attack, so our options are much broader14:13
*** felipemonteiro__ has joined #openstack-infra14:13
clarkb`iptables -A INPUT -p tcp --syn --dport 23 -m connlimit --connlimit-above 2 -j REJECT` is the manpage example for limiting telnet to 2 connections14:13
clarkbso I think you can s/23/29418/ s/2/100/ and that will limit a single client to 100 gerrit git connections which should be plenty14:14
funginice. i guess we need that earlier in the chain than the 29418/tcp allow?14:14
clarkbfungi: I think so since first match wins in iptbales14:15
*** jcoufal has quit IRC14:15
clarkbs/git/ssh/14:15
*** mriedem has quit IRC14:15
*** jcoufal has joined #openstack-infra14:15
*** tesseract has quit IRC14:16
fungionce i'm done shutting down these offending connections, i'll add that and then remove the block for 169.48.164.163 and see if it gets past 10014:16
mordredpabelanger: this makes me think that maybe the mqtt/fedmsg trigger for v3 may be more important :)14:16
*** felipemonteiro has quit IRC14:17
clarkb# allow 2 telnet connections per client host is the comment for that command too. So it is per client host/ip14:17
clarkbwon't limit us to 100 total from all clients. Though we may consider putting such a rule in place for whatever our ssh max is in total too14:18
clarkbI'm trying to push to puppet-zanata and still failing... git review is out to lunch. I shall be patient14:18
*** ldnunes has quit IRC14:19
clarkbremote: error: internal error while processing changes14:19
*** panda is now known as panda|bbl14:19
clarkbfungi: ^ fyi14:19
fungii've already closed 1k connections from that address... i guess it wants lower still14:19
pabelangermordred: Ya, not a good week for gerrit, that is for sure14:19
fungiand it's a milestone week... unfortunate timing14:20
clarkbpossibly worth a bug to mina ssh too?14:20
clarkbor gerrit maybe14:20
*** xyang1 has quit IRC14:20
*** mhickey has joined #openstack-infra14:21
pabelangerconnlimit sounds like a good step if we can get that working14:21
*** rfolco has joined #openstack-infra14:21
*** tesseract has joined #openstack-infra14:23
*** xyang1 has joined #openstack-infra14:24
*** ykarel has quit IRC14:25
sdagueis gerrit gone all crazy again?14:26
sdagueah... yeh, seems like14:26
sdaguehost 169.48.164.16314:26
sdagueoh, it's another softlayer system?14:27
*** gardlt has joined #openstack-infra14:27
lbragstadi think i'm seeing some strange behavior with gerrit, too?14:28
mordredlbragstad: yah - we've have another DOS14:28
*** liusheng has quit IRC14:29
lbragstadmordred: ah14:29
mordredclarkb: do you think we need the limit to be as high as 100?14:29
*** liusheng has joined #openstack-infra14:30
mordred(I mean, 100 is obviously an improvement if it works - more just bikeshedding on what we think the limit _should_ be)14:30
*** cshastri has quit IRC14:30
*** jamesdenton has quit IRC14:30
mordredI guess it might be problematic for folks behind a corporate firewall if we lower it too much14:30
fungilooking at the counts, i saw others up in the neighborhood of 2014:31
*** ldnunes has joined #openstack-infra14:31
*** prateek has quit IRC14:31
fungiso 100 is probably high enough to only be hit if something is really, really gone awry14:31
fungiall the offenders i've blocked this week were well over 50014:31
fungimost in the thousands14:32
clarkbmordred: fungi ya figured its high enough no one doing legit stuff should notice but low enough to still be less than 1/10 of the aggregate limit14:32
fungiand at this point i've closed 50% of the connections from 169.48.164.163 so i'm starting to wonder if this just leaves mina-sshd indefinitely broken14:32
clarkbwe can probably go lower, ~25?14:33
clarkbmordred: I mostyly worry about NAT14:33
clarkb100 should avoid NAT problems (I hope014:33
fungiright, i assume a number of the higher counts are from multiple users behind a common nat14:33
sdagueyeh, the NAT question is a problem. I know I hit that before when being on a corp firewall.14:34
fungisimilarly, when we all get together at conferences...14:34
sdagueis there any way to determine the connections / ip / user14:34
sdagueor are we kind of disconnected there?14:34
fungisdague: in this case there is no user. these are preauthentication14:34
sdaguethat would like you whitelist known NATs14:34
*** EricGonc_ has joined #openstack-infra14:34
*** EricGonczer_ has quit IRC14:35
*** e0ne has quit IRC14:35
fungioh, i get you. yes we can scrape gerrit's ssh log for details on which account names connect from what ip addresses. also active connections have their account and ip address reported in the show-connections api output14:36
clarkbsdague: fungi mordred thankfully most nat connections are transient, you push code or list projects or whatever14:36
pabelangerfail2ban could do that too14:36
fungiright. it's mainly event stream connections which persist14:36
pabelangerused to use it for asterisk systems a lot14:36
clarkbsdague: fungi so you need to have 100 people all making an ssh connection at once (possibly conceivable at at summit/ptg but even then not too worried if limit is ~100)14:37
clarkbpabelanger: I've never had good luck with fail2ban14:37
*** jamesmcarthur has joined #openstack-infra14:37
jeblairpabelanger: i have deleted node 916508314:37
clarkbI fiddled with it back when we "had" to allow ssh with passwords14:37
clarkbturns out people get passwords wrong a lot (not the case here but ya)14:38
fungiright, i think 100 is probably a fine compromise and if we get reports of issues during summit or ptg we can always whitelist those nat pools manually14:38
pabelangerclarkb: it worked okay when you had a rouge phone on your network, not sure I ever used it on public web14:38
*** jamesmcarthur has quit IRC14:38
pabelangerjeblair: great, thanks14:38
*** jamesmcarthur has joined #openstack-infra14:38
pabelangeralso, rogue*14:38
mordredyah. and I think medium-term getting an mqtt option for folks for 3rd party ci will be a great choice for mitigation14:38
mordredsince we can then limit acl access to stream-events and konw that ssh connections are all from users - but that's ont a this-month thing14:39
*** claudiub has quit IRC14:40
pabelangerfor some reason we have a 16+hr noop job in check pipeline14:41
pabelangerlooking to see why14:41
*** yland has quit IRC14:42
*** salv-orlando has joined #openstack-infra14:42
pabelangerodd14:42
pabelangerhttps://review.openstack.org/#/c/472459/14:42
pabelangerrefs/meta/config14:42
pabelangerhttps://review.openstack.org/#/c/472460/ too14:43
pabelangerI guess somebody used the gerrit webui to try and update something?14:43
*** yland has joined #openstack-infra14:43
fungipabelanger: i suspect that repo is waiting for a job that no launchers have registered14:43
*** yland is now known as Guest2269514:44
*** salv-orl_ has joined #openstack-infra14:44
*** Dinesh_Bhor has quit IRC14:44
fungipabelanger: but yes, also, the acl editor is an attractive nuisance14:44
pabelangerya, I think we can safely abandon them, that would clear the job in check14:44
fungipabelanger: mind abandoning those reviews with a pointer to the appropriate infra-manual section?14:44
pabelangerfungi: yes, mentioned openstack-infra but manual is a good idea too14:46
fungioh weird. the openstack/mors project is getting those jobs via the noop-jobs project-template so i guess there's no layout misconfiguration. wonder if zuul-merger is failing to create the merge commit because it can't checkout the "branch" there?14:46
clarkbfungi: do you expect gerrit to be happier now?14:48
pabelangerya, will check logs shortly14:48
*** salv-orlando has quit IRC14:48
fungiclarkb: dunno, we're down to 1.5k open connections from the offending system now, but i don't know how many sends mina-sshd into crazytown14:48
fungiapproaching 1k open14:50
*** jbadiapa_ has quit IRC14:51
fungii'm curious to see whether closing the connections gets it back into a working state, or if that's futile and we just have to restart gerrit regardless when this happens14:51
*** xarses has joined #openstack-infra14:51
dtantsurhi folks! is gerrit down/has problems?14:52
clarkbfungi: I'm beginning to think restarting gerrit may be required based on the number of ^ reports14:52
odyssey4mecompletely busted for me for a few mins now14:53
*** andreww has joined #openstack-infra14:53
fungiyeah, we're down to only 1k open connections from softlayer at this stage14:53
dtantsuralso seeing 'internal server error' from 'git review' command14:53
pabelangerzuul also hasn't launched anything in 45mins now14:54
fungistarting to agree once mina-sshd tips over into broken from a connection flood there may be no recovering short of restarting gerrit completely14:54
pabelanger++14:55
fungi#status notice The Gerrit service on review.openstack.org is being restarted now to clear an issue arising from an unanticipated SSH API connection flood14:55
openstackstatusfungi: sending notice14:55
*** bnemec is now known as beekneemech14:55
beekneemechGood timing.  It just fell over completely for me. :-)14:55
*** xarses has quit IRC14:56
*** jpena is now known as jpena|off14:56
-openstackstatus- NOTICE: The Gerrit service on review.openstack.org is being restarted now to clear an issue arising from an unanticipated SSH API connection flood14:56
*** xarses has joined #openstack-infra14:57
*** andreww has quit IRC14:57
openstackstatusfungi: finished sending notice14:58
*** makowals has quit IRC14:58
*** jpena|off is now known as jpena14:58
openstackgerritPaul Belanger proposed openstack-infra/zuul feature/zuulv3: WIP: Add reporter for Federated Message Bus (fedmsg)  https://review.openstack.org/42686115:00
*** mdrabe has quit IRC15:00
amoralejpabelanger, this is the node to hold "[Zuul] Building remotely on tripleo-centos-7-tripleo-test-cloud-rh1-9232499"15:02
*** armax has joined #openstack-infra15:02
dtantsurjust FYI: this outage resulted in a few patches lost after "git review". may be worth asking people to double-check.15:02
pabelangeramoralej: ssh public key again please15:03
openstackgerritClark Boylan proposed openstack-infra/puppet-zanata master: Add cron to clean out logs  https://review.openstack.org/47268315:03
openstackgerritClark Boylan proposed openstack-infra/puppet-zanata master: Fix lint issues  https://review.openstack.org/47272215:03
*** HeOS has quit IRC15:03
amoralejpabelanger, https://github.com/amoralej.keys15:03
clarkbfungi: pabelanger ^ I think that should address the puppet issues on my first patch15:03
clarkbdtantsur: ya I noticed that with the above changes. The parent never got created (would've been a new change) and the child got a new patchset that pointed to the missing change15:04
pabelangeramoralej: ssh jenkins@66.187.229.13715:04
clarkbdtantsur: so I think it only affected new changes, but newp atchsets are ok (at least with a sample size of one)15:04
dtantsurgood to knwo15:04
amoralejpabelanger, thx15:05
*** tmorin has joined #openstack-infra15:05
dtantsuryeah, I did manage to update a few patches as well, despite the internal error15:05
fungiclarkb: i've tried inserting the connlimit reject at the start of the INPUT chain and removing all the host-specific drop rules. watching connection counts now to see what happens15:05
fungi169.48.164.163 is already up to 2115:06
fungigoing to see if it manages to push past 10015:06
pabelangerokay, mors stuck jobs removed after abandoning the patches15:07
tmorinhi guys, seems like no test job has been triggered for some changes submitted 10 minutes ago: are the test job going to start, or were the triggers lost and we need to do rechecks ?15:07
*** cshen has quit IRC15:07
pabelangertmorin: yes, feel free to recheck. We had to restart gerrit15:08
*** rcernin has quit IRC15:08
tmorinpabelanger:  thanks, I didn't want to overload the thing uselessly :)15:08
openstackgerritMerged openstack-infra/puppet-zuul master: Expose zuul_status_url for zuulv3  https://review.openstack.org/47247415:09
szaherpabelanger: Can I post new changes now ?15:09
fungithree of the addresses we've blocked this week are already up over 20 connections now15:09
*** jaosorior has quit IRC15:09
pabelangerszaher: yes, gerrit is ready to be used again15:09
fungiso this will be a good test (as long as i keep a close eye on things)15:09
szaherpabelanger: Thanks :)15:09
clarkbfungi: so they never even turned them off?15:10
*** mdrabe has joined #openstack-infra15:10
fungiclarkb: correct15:10
fungiyjeu15:10
fungigrrr15:10
szaherpabelanger: well for me, I still can't push anything to project-config15:10
fungithey've just been retrying )brokenly) all week ;)15:10
openstackgerritMerged openstack-infra/system-config master: Use openstack status.json file for zuulv3.o.o  https://review.openstack.org/47247515:11
clarkbszaher: how is it failing and when did you try?15:11
pabelangerszaher: do you get an error?15:11
szaherpabelanger: To ssh://szaher@review.openstack.org:29418/openstack-infra/project-config.git15:11
szaher ! [remote rejected] HEAD -> refs/publish/master/freezer-tempest-plugin (no new changes)15:11
szaherno new changes15:11
*** hongbin has joined #openstack-infra15:11
clarkbszaher: right so the error is in the (), no new changes. that is the problem that dtantsur was talking about15:11
clarkbszaher: step 1 is checking if it actually did push succesffully the first time15:12
clarkbszaher: lookup the change by change id in gerrit15:12
clarkbif it did push then you are done. If it didn't then you will need to make some sort of chagne to your chagn and repush it so that the commit is different and gerrit stops complaining15:13
*** rkukura has joined #openstack-infra15:13
szaherclarkb: Ok, Thanks :)15:13
*** jamesmcarthur has quit IRC15:13
openstackgerritSaad Zaher proposed openstack-infra/project-config master: Added Freezer tempest plugin repo  https://review.openstack.org/47273215:15
*** salv-orl_ has quit IRC15:16
*** salv-orlando has joined #openstack-infra15:17
*** rderose has joined #openstack-infra15:18
*** dtantsur is now known as dtantsur|afk15:19
fungiokay, now we have four misconfigured and previously blocked addresses with connection counts over 2015:20
fungisome seem to climb faster than others15:20
*** salv-orlando has quit IRC15:20
*** rkukura has quit IRC15:21
*** jbadiapa has joined #openstack-infra15:21
clarkbthey must have more cpus to negotiate the initial diffie hellmann portion of the ssh connection :P15:21
clarkbs/more/faster/15:21
fungiindeed15:21
*** claudiub has joined #openstack-infra15:23
openstackgerritClark Boylan proposed openstack-infra/puppet-zanata master: Fix lint issues  https://review.openstack.org/47272215:23
openstackgerritClark Boylan proposed openstack-infra/puppet-zanata master: Add cron to clean out logs  https://review.openstack.org/47268315:23
fungialso the connlimit-above doesn't seem to quite manage to the limit you give it, but comes close from what i can tell. so far a couple of them (just barely) exceeded 100 but only made it to 101 or 102 and are holding steady for a while15:23
clarkbfungi: pabelanger sorry, missed a linter error15:23
clarkbfungi: "its not going to the moon" - my aircraft mechanic brother (now how do you feel about flying)15:24
fungias long as i don't need to fly to the moon any time soon, not so bad15:24
openstackgerritRosario Di Somma proposed openstack-infra/shade master: Convert data from raw clients to dict or list of dicts  https://review.openstack.org/47269015:25
*** mhickey has quit IRC15:28
rcarrillocruzhelo helo15:28
rcarrillocruzquestion folks15:28
rcarrillocruzis nodepool a thing in centos?15:28
rcarrillocruzdo we gate for nodepool on centos15:28
rcarrillocruz?15:28
rcarrillocruzabout to put nodepool for testing some stuff15:29
clarkbrcarrillocruz: do you mean "is nodepool tested on centos?"15:29
rcarrillocruzyes15:29
fungiclarkb: looks like it's holding up nicely! http://paste.openstack.org/show/612145/15:29
*** Goneri has quit IRC15:29
clarkbrcarrillocruz: it isn't. We have jobs that test nodepool can build centos images though. That said the only real system interaction nodepool has is with dib and that is tested so it should just work15:30
clarkbrcarrillocruz: dib tests that dib can run on centos15:30
rcarrillocruzk, will give it a shot then, thx, cos I'm not going to need dib builds anyway15:30
*** EricGonc_ has quit IRC15:31
* fungi is curious how you plan to use nodepool without dib15:31
clarkbrcarrillocruz: I don't know that current nodepool is happy without the dib builds15:31
clarkbfungi: ya that :)15:31
openstackgerritRosario Di Somma proposed openstack-infra/shade master: Convert data from raw clients to Munch objects  https://review.openstack.org/47269015:31
*** EricGonczer_ has joined #openstack-infra15:31
fungii suppose you could fake out teh dib calls and have them just return the pre-baked image you plan to use or something?15:31
clarkbfungi: cool so its holding at 1 or 2 above max, not too bad15:32
fungiclarkb: yeah, i need to step away for some errands shortly but will look into puppeting the rule addition when i get back15:32
rcarrillocruzi'm thinking of using it to test out network gear (IOS and the likes)15:32
*** rderose has left #openstack-infra15:32
clarkbfungi: rcarrillocruz you could write records into zookeeper that point at preuploaded images. It would just be aa manual step to do that I think15:32
rcarrillocruzah wait15:32
clarkbfungi: I too have to step away to get kids ready for the doctor will be back later today to debug afs more15:32
fungioh, yeah that's not a terrible idea15:32
rcarrillocruzwas talking about nodepool 2.x something15:32
clarkbrcarrillocruz: yes that uses zookeeper15:33
rcarrillocruzthat's non zookeeper, right?15:33
rcarrillocruzOH15:33
rcarrillocruzi thought that was only on feature/zuulv315:33
clarkbyou need 0.ancient to not have zookeeper15:33
rcarrillocruzi was confused then15:33
rcarrillocruzthx!15:33
pabelangerrcarrillocruz: I make sure ansible-role-nodepool works on centos-7, that is gating15:33
clarkbnope the nodepool zookeepering is independent of the zuul zookeepering today. We run zuul 2.5 without zookeeper with nodepool whatever.latest with zookeeper15:33
rcarrillocruzgotcha15:34
rcarrillocruzpabelanger: neat! cos i had your role repo just in front of me right now :-)15:34
fungiclarkb: the connlimit is still holding steady there. total ssh api connections to gerrit are hovering between 620-630 steady for a while now15:36
clarkbfungi: we should investogate a total limit too to protect gerrit15:37
pabelangerrcarrillocruz: I'm trying to push rdo to package zookeeper but for now I am just depending on fedora testing15:38
rcarrillocruzerm15:38
rcarrillocruzthat's be awesome15:38
rcarrillocruzcos as the chat we had the other day15:38
rcarrillocruzthe only thing i could find was the cloudera package15:38
rcarrillocruz:/15:38
clarkbit runs out of a tarball just fine15:38
clarkbthat is how I install locally for testing15:38
fungiclarkb: agreed, those four abusers are presently making up ~2/3 of the total connection count to the api15:38
*** jamesmcarthur has joined #openstack-infra15:39
fungiso we likely still need to couple this with some manual blocking15:39
pabelangerya, I need to update an ansible role I have for zookeepr to support the tarball option15:39
pabelangermight work on the flight to London15:39
clarkbfungi: ++15:39
*** mhickey has joined #openstack-infra15:41
fungii've manually re-blocked the four offenders using drop rules at the top of the input chain and am closing all their active connections to gerrit now15:41
*** jcoufal_ has joined #openstack-infra15:43
*** jamesmcarthur has quit IRC15:43
openstackgerritMichal Jastrzebski (inc0) proposed openstack-infra/project-config master: Make multinode gates regular  https://review.openstack.org/47142815:43
*** mhickey has quit IRC15:43
*** jcoufal has quit IRC15:45
SpamapSpabelanger fungi indeed, there's a group inside IBM/SoftLayer trying to stand up a Zuul. They're not very experienced, and so they may do silly things. Apologies if it broke something.15:49
* SpamapS is not coordinating with them15:50
SpamapSfungi: I'll pass that IP along to them15:50
fungiSpamapS: just amusing that even after you brought it to their attention earlier in the week they kept connecting (even from the old addresses we had blocked)15:50
fungiwe've now, similar to your suggestion, added a connection limit via iptables15:50
jeblairSpamapS: if you could pass along the suggestion that they're welcome to stop by this channel and we can help 'em out, that would be mighty helpful :)15:51
fungihopefully the next one, when it crops up, won't be quite so impactful15:51
*** annegentle has joined #openstack-infra15:51
openstackgerritDanny Abukalam proposed openstack-infra/system-config master: Adding #openstack-uk to statusbot  https://review.openstack.org/47274115:51
SpamapSI think the problem is they're experimenting with something they don't realy understand and not keeping it well contained.15:52
*** Apoorva has joined #openstack-infra15:52
SpamapSjeblair: I will remind them that this is a public channel and they can and should introduce themselves if they're going to Zuul. :)15:52
*** gyee has joined #openstack-infra15:53
fungiit would actually help us if they got in touch, because we _think_ they're hitting a bug clarkb patched in the most current zuul release from a couple months ago15:53
*** jpich has quit IRC15:53
SpamapSInvitation extended.15:54
fungiso if they're running zuul new enough to have the "Close paramiko connections explicitly" commit (2.5.2 release or maybe master branch tip) then maybe there's another bug we don't know about15:54
*** jamesmcarthur has joined #openstack-infra15:54
jeblairit's a demigod and minion of Gozer, the Destructor.  what could possibly go wrong if it escapes containment!15:55
*** salv-orlando has joined #openstack-infra15:55
SpamapSThey're using puppet-openstackci15:55
*** jascott1 has joined #openstack-infra15:55
SpamapSbut who knows when they pulled15:55
*** gardlt has quit IRC15:55
fungiSpamapS: puppet-openstackci uses zuul master branch tip unless overridden in configuration15:56
*** gardlt has joined #openstack-infra15:56
fungiwhich makes me suspect there could be another bug lurking15:56
SpamapSfungi: when does it git pull? Every puppet run?15:56
*** felipemonteiro__ has quit IRC15:56
*** dougwig has joined #openstack-infra15:58
*** jcoufal has joined #openstack-infra15:58
openstackgerritPaul Belanger proposed openstack-infra/zuul feature/zuulv3: WIP: Add reporter for Federated Message Bus (fedmsg)  https://review.openstack.org/42686115:58
*** gardlt_ has joined #openstack-infra15:58
pabelangerjeblair: I am ready to start up zuuv3.o.o and ze01.o.o again, if you are15:59
fungiSpamapS: i believe so... http://git.openstack.org/cgit/openstack-infra/puppet-zuul/tree/manifests/init.pp#n15615:59
fungihttp://git.openstack.org/cgit/openstack-infra/puppet-openstackci/tree/manifests/zuul_scheduler.pp#n5516:00
*** gardlt__ has joined #openstack-infra16:00
fungibut possible they pass some explicit $revision into openstackci::zuul_scheduler16:00
*** jcoufal_ has quit IRC16:00
*** rkukura has joined #openstack-infra16:01
*** jpena is now known as jpena|away16:01
*** gardlt has quit IRC16:01
*** r-daneel has joined #openstack-infra16:01
*** jbadiapa has quit IRC16:01
*** pblaho has quit IRC16:02
*** amoralej is now known as amoralej|brb16:02
*** gardlt__ has quit IRC16:02
*** gardlt has joined #openstack-infra16:02
SpamapSfungi: meet dougwig ... dougwig.. meet fungi.16:02
pabelangerI believe you need to kick off puppet manually however16:02
*** jascott1 has quit IRC16:02
pabelangerhttps://docs.openstack.org/infra/openstackci/third_party_ci.html#run-masterless-puppet16:02
fungioh, i've spoken to dougwig many times in the past16:02
dougwigfungi: SpamapS: hiya, and we know each other.  :)16:02
*** lucasagomes is now known as lucas-afk16:02
SpamapSdougwig: fungi is the tech lead for the infra team and can help direct you to any resources to make your puppet-openstackci and Zuul experience a positive one.16:02
pabelangerhttps://docs.openstack.org/infra/openstackci/third_party_ci.html#updating-your-masterless-puppet-hosts too16:02
*** gardlt_ has quit IRC16:03
fungiso if using openstackci::single_node_ci it still defaults to zuul master per http://git.openstack.org/cgit/openstack-infra/puppet-openstackci/tree/manifests/single_node_ci.pp#n18716:03
jeblairpabelanger: yep! let's do it!16:05
fungidougwig: when you get a chance, can you check what installed version `pip list|grep zuul` reports?16:05
clarkbpbr freeze will give you the short sha1 of the version of zuul installed which may also be helpful. Also version of paramiko16:05
clarkbsince I think older paramiko doesn't work with the fix?16:05
fungidougwig: if it's really the tip of master, it'll hopefully be 2.5.3.dev116:05
dougwigfungi: I'm still trying to track down who was running that; I definitely will when I find it.16:05
fungidougwig: awesome. i can give you ip addresses we're seeing if that helps, but i suspect there's a nat or something16:06
jeblairpabelanger: i'll try starting z-e16:06
*** tosky has quit IRC16:06
dougwigit's a float from the ocata cloud that I administer.  trying to see who was using it; it's gone already16:06
clarkbok I've got to pop out for real now. back in a few hours16:06
pabelangerjeblair: Oh, I just did16:06
pabelangerjeblair: I see hostkey failures still, let me make sure we added that properly16:07
jeblairpabelanger: cool, the lockfile did its thing, there's only one running :)16:07
jeblairpabelanger: yep16:07
clarkbpabelanger: fungi  btw https://review.openstack.org/#/c/472722/ and its child pass tests now16:07
pabelangerknown_hosts is setup16:07
fungidougwig: if "already" was just in the last few minutes maybe, but we were still seeing connections coming from there as of 25 minutes ago (some addresses were ones we saw trying to connect on wednesday as well)16:07
dougwigfungi: aye, I dumped the entire float list when I logged in here, and 163 had been deleted.16:09
openstackgerritDanny Abukalam proposed openstack-infra/system-config master: Adding #openstack-uk to statusbot  https://review.openstack.org/47274116:09
dougwigfungi: if you see it now, I've got a rogue on my network.16:10
fungioh, i stand corrected, the ones from sl-reverse.com earlier this week weren't reconnecting, it was the other ones from sparqnet.net, hinet.net and one from "Ji Tong Communications Co.,Ltd" with no reverse entry16:10
*** jcoufal_ has joined #openstack-infra16:10
pabelangerjeblair: oh, looks like we might have old data for ssh host keys on review.o.o16:10
fungidougwig: yep, i concur, seems to have stopped per tcpdump16:11
*** annegentle has quit IRC16:11
jeblairhrm, how do i manually compare the entry in known_hosts to the fingerprint ssh gives?16:12
jeblairssh-keygen -l -f ~/.ssh/known_hosts16:12
jeblairpabelanger: i agree; ^ that does not match16:12
*** jcoufal has quit IRC16:13
pabelangerI think we are using old IP address and public key16:13
pabelangerwhich is odd, because I too that from zm01.o.o puppet info16:13
fungipabelanger: are you using the gerrit ssh api host key from public hiera?16:13
*** jcoufal__ has joined #openstack-infra16:13
pabelangerfungi: It was hiera, but private16:14
pabelangerlet me confirm again16:14
*** jascott1 has joined #openstack-infra16:14
jeblairthat's weird, why would the host key be private?16:14
jeblairpabelanger: gerrit-code-review@review-dev.openstack.org16:15
pabelangernot sure, we likely could move it public16:15
jeblairpabelanger: right ip address, wrong host key16:15
pabelangerAh16:15
*** jcoufal_ has quit IRC16:15
dabukalamHi, we've started a new channel #openstack-uk for the UK OpenStack community. Wiki says I should ask in here to ensure it gets registered properly. I've started that process by adding openstackinfra to list of users and adding the channel to the list of channels here - https://review.openstack.org/#/c/472741/. Have I done this right?16:16
pabelangerjeblair: do we want to move it public now?16:16
fungii could have sworn we put gerrit_ssh_rsa_pubkey_contents into public hiera. did my change for that never merge?16:16
fungioh, i had it wip for some reason https://review.openstack.org/35070916:17
fungiwas depending on https://review.openstack.org/35066316:17
fungiaha, failed testing and i didn't have time to sort out why, then didn't get around to revisiting it :/16:18
openstackgerritPaul Belanger proposed openstack-infra/system-config master: Add gerrit_ssh_rsa_pubkey_contents to zuul-executor hiera  https://review.openstack.org/47274816:19
pabelangerwe could do ^ or update private hieradata16:19
fungipabelanger: mind looking at the implementation i already had?16:19
fungior should i just abandon?16:19
pabelangerfungi: ya, just looking now16:19
*** katkapilatova has left #openstack-infra16:20
fungii guess my idea was more grand. make one known_hosts file and we can keep it updated everywhere rather than needing to work out which specific known_hosts entries each system needs16:20
pabelangerfungi: we could go that route too. I don't really have a preference16:21
pabelangerfungi: if we went that route, we can use your hiera configuration, and update ze01.o.o today to use it. Then migrate other servers as we have time16:22
*** tmorin has quit IRC16:22
fungii saw it as a sort of stop-gap until we can rely on dnssec with sshfp records for a global known host keys solution16:22
*** sbezverk has joined #openstack-infra16:23
fungifollow-on plan was to start just installing it at /etc/ssh/ssh_known_hosts on all our systems16:23
*** annegentle has joined #openstack-infra16:23
fungirather than trying to hack maintaining user-specific ~/.ssh/known_hosts files16:23
fungianyway, i need to go run some errands but should return in a couple hours16:25
pabelangerokay, I've also changed private hieradata for now too. To keep us moving forward, until we come up with a plan to sync known_hosts everwhere16:25
fungipabelanger: sounds good16:25
jeblairpabelanger: what did you change in private hieradata?16:25
pabelangerjeblair: gerrit_ssh_rsa_pubkey_contents for zuul-executor.yaml16:26
pabelangerto match contents from zuul-merger.yaml16:26
jeblairgotcha16:27
*** annegentle has quit IRC16:29
*** annegentle has joined #openstack-infra16:30
*** ltomasbo is now known as ltomasbo|away16:32
*** tesseract has quit IRC16:32
*** pcaruana has quit IRC16:34
*** esberglu has quit IRC16:39
*** esberglu has joined #openstack-infra16:39
*** esberglu has quit IRC16:43
*** rcernin has joined #openstack-infra16:45
*** ericyoung has quit IRC16:46
*** Guest22695 has quit IRC16:50
openstackgerritMerged openstack-infra/tripleo-ci master: ovb playbook: add task to delete overcloud  https://review.openstack.org/46374016:52
jeblairRSA host key for IP address '2001:4800:7819:103:be76:4eff:fe05:8525' not in list of known hosts.16:53
jeblairPermission denied (publickey).16:53
jeblairpabelanger: ^16:53
jeblairpabelanger: which is strange, because "ssh -i /var/lib/zuul/ssh/id_rsa zuul@review.openstack.org -p29418" seems to work16:53
pabelangerI think it is because we have the wrong IPv6 address16:54
pabelanger2001:4800:7815:104:3bc3:d7f6:ff03:bf5d is what I added16:54
jeblairi agree, 2001:4800:7819:103:be76:4eff:fe05:8525 is the right one.16:54
pabelangerzuul_merger.pp must be outdated16:55
*** Guest22695 has joined #openstack-infra16:55
pabelangerwill fix ze01.o.o first16:55
pabelanger23.253.232.87 seems incorrect too16:56
openstackgerritBen Nemec proposed openstack-infra/tripleo-ci master: Ping test horizon  https://review.openstack.org/47275816:56
*** Guest22695 has quit IRC16:56
pabelangerjeblair: 104.130.246.91 looks to be the ipv4 address also16:57
pabelangershould we change that too?16:57
jeblairpabelanger: yep.  i'm not sure why we don't see warnings on the mergers.16:57
jeblairpabelanger: it may only log that warning on error16:58
jeblairpabelanger: the ip address being wrong is causing a warning, but ssh continues16:58
jeblair"Permission denied (publickey)" is the actual error16:58
*** rkukura has quit IRC16:58
openstackgerritPaul Belanger proposed openstack-infra/system-config master: Update ze01.o.o known_host file with proper IP addresses  https://review.openstack.org/47275916:59
*** derekh has quit IRC16:59
pabelangerjeblair: Hmm, agree publickey should not be failing16:59
*** yamahata has joined #openstack-infra16:59
pabelangerlet me confirm zuul.conf section16:59
openstackgerritBao proposed openstack-infra/jenkins-job-builder master: Add `do-not-fetch-tags` to CloneOption for Git  https://review.openstack.org/47276117:00
jkilpatrpabelanger, any idea why the test vm's are missing openssl-devel? http://logs.openstack.org/48/470748/5/check/gate-browbeat-pep8-ubuntu-xenial/9596318/console.html17:02
pabelangerjkilpatr: the dependency was recently removed when we stopped installing npm / nodejs. You'll need to add them into your bindep.txt file now.  There is also a post on ML about it17:03
jkilpatrbindep that's what I was trying to remember.17:04
jkilpatrthanks!17:04
pabelangerjeblair: it is possible we use ssh config to setup the location to our private key?17:06
pabelangeractually, I think we use environmental variable for it now17:09
jeblairpabelanger: i don't follow17:09
pabelangerjeblair: I am wondering if we are not passing our private key properly to ssh to auth with17:09
jeblairpabelanger: yeah, there may be a problem with the new ssh context manager stuff17:09
jeblairi'm setting up a test case17:09
pabelangerack17:09
*** Apoorva_ has joined #openstack-infra17:14
openstackgerritMerged openstack-infra/system-config master: Update ze01.o.o known_host file with proper IP addresses  https://review.openstack.org/47275917:14
*** pblaho has joined #openstack-infra17:14
*** dizquierdo has quit IRC17:14
*** Apoorva has quit IRC17:18
*** esberglu has joined #openstack-infra17:19
*** amoralej|brb is now known as amoralej17:20
*** felipemonteiro has joined #openstack-infra17:20
*** esberglu has quit IRC17:21
*** armax has quit IRC17:21
*** esberglu has joined #openstack-infra17:21
*** jpena|away is now known as jpena17:22
*** jpena is now known as jpena|off17:23
*** jamesmcarthur has quit IRC17:25
*** jamesmcarthur has joined #openstack-infra17:26
*** dhinesh has joined #openstack-infra17:30
*** trown is now known as trown|lunch17:34
*** rbrndt has quit IRC17:34
*** jamesmcarthur has quit IRC17:37
*** mat128 has quit IRC17:39
*** Goneri has joined #openstack-infra17:39
openstackgerritBao proposed openstack-infra/jenkins-job-builder master: Add `do-not-fetch-tags` to CloneOption for Git  https://review.openstack.org/47276117:40
*** mat128 has joined #openstack-infra17:41
annegentleif you have a moment, could I get eyes on https://review.openstack.org/#/c/461280/ -- it's a change to reviewstats and it looks like the -infra core team are reviewers on that repo.17:41
*** ericyoung has joined #openstack-infra17:41
*** mat128 has quit IRC17:41
*** rkukura has joined #openstack-infra17:42
*** prad_ has joined #openstack-infra17:43
*** makowals has joined #openstack-infra17:45
*** makowals has quit IRC17:49
*** prateek has joined #openstack-infra17:50
*** liusheng has quit IRC17:50
*** salv-orlando has quit IRC17:50
*** salv-orlando has joined #openstack-infra17:51
*** liusheng has joined #openstack-infra17:51
*** prateek_ has joined #openstack-infra17:54
*** salv-orlando has quit IRC17:55
*** sbezverk has quit IRC17:56
*** sbezverk has joined #openstack-infra17:57
*** prateek has quit IRC17:57
*** vhosakot has quit IRC18:04
*** e0ne has joined #openstack-infra18:04
*** yland has joined #openstack-infra18:06
*** yland is now known as Guest5576318:06
*** iogg has quit IRC18:07
inc0hey guys, can we manually trigger merge publisher job?18:07
*** vhosakot has joined #openstack-infra18:13
*** electrofelix has quit IRC18:13
inc0I need to run this job https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/kolla.yaml#L2818:15
pabelangeryou can put the job in the experimental pipeline, then run 'check experimental' on your patchset18:16
inc0pabelanger: I need to do it once18:17
inc0we released, tag changed, tarballs images are obsolete18:17
inc0I need to refresh them, our deploy gates are down now18:17
*** trown|lunch is now known as trown18:18
pabelangernot sure I am following18:20
inc0our images are tagged with pbr-generated version18:20
inc0so when you build image, it will get tag 5.0.0 today18:20
inc0it was 4.0.2 yesterday18:20
inc0and ansible will expect 5.0.018:20
inc0so we need to refresh tarballs.o.o18:21
pabelangerhow does it work today, a post job IIRC?18:22
openstackgerritBao proposed openstack-infra/jenkins-job-builder master: Add `do-not-fetch-tags` to CloneOption for Git  https://review.openstack.org/47276118:22
*** sbezverk has quit IRC18:22
inc0I think so, https://github.com/openstack-infra/project-config/blob/master/jenkins/jobs/kolla.yaml#L5118:22
pabelangerhttp://logs.openstack.org/14/142c3b839ef9188197b5b5c968266c1ae7dce22d/post/ should have been the last job to run18:25
pabelangerdid something there change or break?18:25
*** rbrndt has joined #openstack-infra18:26
*** vhosakot has quit IRC18:26
inc0pabelanger: https://review.openstack.org/#/c/472671/18:26
*** vhosakot has joined #openstack-infra18:27
*** felipemonteiro has quit IRC18:27
pabelangerokay, so you had a release, 5.0.0.0b2 but images are older then that? And some how you are expecting 5.0.0.0b2 right?18:27
inc0yes18:28
inc0exactly18:28
pabelangerhow have you fixed this issue before?18:28
inc0frankly I can't remember, it'll fix itself when first thing merges to Kolla18:28
pabelangerright, or some periodic job18:29
inc0but kolla-ansible gates are down till that happens18:29
inc0I don't think we have periodic job for that18:29
inc0we will when we're done with dockerhub publisher18:29
*** ericyoung has quit IRC18:29
inc0that being said it would be cool to have any way to trigger these jobs manually18:29
inc0in case of sth like this18:29
*** e0ne has quit IRC18:30
pabelangerwe tend not to do manually triggers because they depend on humans, and basically block your development processes18:30
pabelangerlet me see if I can figure out the syntax18:30
inc0yeah I understand, maybe trigger this automatically on release at some point18:31
inc0that would be ideal18:31
*** Guest55763 has quit IRC18:31
pabelangerright, you can do that today using the release pipeline18:32
pabelangerwhich will kick off a build each time a release happens18:32
*** felipemonteiro has joined #openstack-infra18:32
inc0worst case scenerio I'll just make stub change and workflow it..18:32
inc0good to know18:33
*** ralonsoh has quit IRC18:33
pabelangerinc0: that is the fastest right now honestly. I need to construct the syntax for trigger18:33
pabelangerand how you've likely done it to fix before18:33
*** annegentle has quit IRC18:34
*** felipemonteiro__ has joined #openstack-infra18:35
pabelangerinc0: look to manila-image-elements jobs in zuul/layout.yaml. You can do the same for kolla18:35
inc0thanks pabelanger I'll look at tit18:37
*** annegentle has joined #openstack-infra18:37
inc0which also made a funny typo18:37
fungiyeah, _if_ there's a release (or pre-release) pipeline job, we can reenqueue the relevant tag if its jobs need to be rerun because something broke18:38
*** felipemonteiro has quit IRC18:38
inc0fungi: good to know, I'll include it in our publisher jobs18:38
*** rkukura has quit IRC18:39
*** amoralej is now known as amoralej|off18:40
fungiinc0: these are the things which ran in the pre-release pipeline when that tag was pushed: http://logs.openstack.org/7c/7c040a11dd3eabd93940db44f358a04bd711145c/pre-release/18:42
*** yolanda has quit IRC18:43
fungi(note that the pre-release pipeline matches pre-release (alpha, beta, release candidate) tags, and release matches release versioned tags (as their names would imply)18:45
*** yolanda has joined #openstack-infra18:45
fungiso you can choose to run different jobs for pre-releases and releases if you want18:45
*** florianf has quit IRC18:46
*** rkukura has joined #openstack-infra18:47
*** EricGonczer_ has quit IRC18:51
*** sdague has quit IRC18:51
*** EricGonczer_ has joined #openstack-infra18:52
*** jcoufal__ has quit IRC18:53
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: WIP: organize the tripleo ci configurations and playbooks  https://review.openstack.org/47277718:54
*** gardlt has quit IRC19:05
*** gardlt has joined #openstack-infra19:07
*** sdague has joined #openstack-infra19:09
*** gardlt has quit IRC19:11
*** makowals has joined #openstack-infra19:23
*** EricGonczer_ has quit IRC19:24
*** EricGonc_ has joined #openstack-infra19:24
*** rossella__ has joined #openstack-infra19:25
*** prateek_ has quit IRC19:28
*** makowals has quit IRC19:30
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107919:30
*** amoralej|off is now known as amoralej19:36
*** rkukura has quit IRC19:41
*** EricGonc_ has quit IRC19:42
clarkbI have taken the pypi update lock on mirror-update.o.o in order to test additioanl afs things19:43
clarkbbasically preventing any new vos releases from happening so I can control that and test the effects19:43
*** EricGonczer_ has joined #openstack-infra19:44
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107919:46
*** rossella__ has quit IRC19:47
*** gardlt has joined #openstack-infra19:48
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107919:48
*** prad_ has quit IRC19:52
*** spzala has quit IRC19:54
openstackgerritJames E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix git ssh env in merger  https://review.openstack.org/47278819:55
clarkbjeblair: a noop vos release is sufficient to create the slow pip install behavior in kna119:56
clarkbso I think what is happening is afs is saying "I got updates" even if it didn't. Which then invalidates the cache metadata forcing subsequent reads to go out and update at least that information but not necessary the complete files19:57
jeblairclarkb: ok, i think that pretty strongly points to file version checks after vos release causing that slowdown.19:57
*** salv-orlando has joined #openstack-infra19:57
clarkbI like the idea of only doing a vos release if we updated a global requirements req. then maybe update otherwise once every 4 hours or something?19:58
jeblairclarkb: that's the best mitigation i can come up with atm.19:58
clarkbif ^ sounds like a reasonable plan to infra-root I can start working on the log parsing to do that19:58
clarkband also do a quick audit of our update cycle in the other  repos19:59
jeblairclarkb: i think the docs vos release script may have some code to query for the most recent release of a volume, that may also come in handy here.19:59
jeblairclarkb: oh, sorry, it's for the most recent update, but probably prett adaptable.19:59
clarkbjeblair: ya since I will need to fall back on doing a vos release in X time period even if global reqs hasn't updated20:00
*** e0ne has joined #openstack-infra20:01
*** annegentle has quit IRC20:01
openstackgerritPete Birley proposed openstack-infra/project-config master: New project - OpenStack-Spaceport  https://review.openstack.org/47279120:03
*** rossella__ has joined #openstack-infra20:03
*** ldnunes has quit IRC20:03
*** yland has joined #openstack-infra20:04
*** rossella__ has quit IRC20:05
*** panda|bbl is now known as panda20:07
fungiclarkb: no objection on my end. maybe upper-constraints.txt instead of global-requirements.txt (on all branches of openstack/requirements for extra credit)?20:08
clarkboh right that will get transitive deps20:09
clarkboh we have to check all branches ugh20:09
fungii said "extra credit" after all20:11
clarkbya I'm just realizing this is more complicated than it first looked :) but I should be able to get something out today20:11
fungiif stable branch changes don't get new deps straight away, maybe not the end of the world20:11
*** Apoorva_ has quit IRC20:12
*** Apoorva has joined #openstack-infra20:13
*** JudeC has joined #openstack-infra20:13
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107920:15
*** ldnunes has joined #openstack-infra20:16
*** thorst_afk has quit IRC20:18
*** thorst_afk has joined #openstack-infra20:20
openstackgerritJames E. Blair proposed openstack-infra/zuul feature/zuulv3: Fix git ssh env in merger  https://review.openstack.org/47278820:21
*** jamesdenton has joined #openstack-infra20:21
*** thorst_afk has quit IRC20:25
dirkthis should be ready for +A : https://review.openstack.org/#/c/471071/20:25
openstackgerritPete Birley proposed openstack-infra/project-config master: New project - OpenStack-Spaceport  https://review.openstack.org/47279120:26
openstackgerritColleen Murphy proposed openstack-infra/project-config master: Start using split out plugin for all keystone jobs  https://review.openstack.org/47279720:28
*** spzala has joined #openstack-infra20:28
*** annegentle has joined #openstack-infra20:30
pabelangerdirk: how are the job runtimes without wheels?20:31
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107920:32
dirkpabelanger: 5% faster than ubuntu: https://review.openstack.org/#/c/471489/20:32
dirkpabelanger: (comparing dsvm-neutron-full times)20:33
*** e0ne has quit IRC20:33
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: WIP: organize the tripleo ci configurations and playbooks  https://review.openstack.org/47277720:34
pabelangerdirk: +2, will let fungi +3 since ptl :)20:36
*** thorst_afk has joined #openstack-infra20:39
amoralejpabelanger, you can unhold the server20:41
amoralejwe already found the issue, it was bad dns + new eventlet20:41
pabelangeramoralej: thanks20:41
amoralejthanks for your help20:41
pabelangeramoralej: what was the dns issue?20:42
amoraleji know it's not a good thing, but i can tell you we were desperate20:42
amoralejwell a mix of dns not working and new eventlet not managing it properly20:42
*** jamesdenton has quit IRC20:42
*** thorst_afk has quit IRC20:43
pabelangeramoralej: ya, you should consider using dns server from nodepool image we create, it is running unbound already and setup to forward requests properly. You'd just need to make a few changes I think20:43
*** sdague has quit IRC20:43
amoralejI'll talk to EmilienM about that next week20:44
*** salv-orl_ has joined #openstack-infra20:44
*** salv-orlando has quit IRC20:46
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: Fix zuul_streamer send() call for py35  https://review.openstack.org/47281620:48
openstackgerritColleen Murphy proposed openstack-infra/project-config master: Start using split out plugin for all keystone jobs  https://review.openstack.org/47279720:49
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: WIP: organize the tripleo ci configurations and playbooks  https://review.openstack.org/47277720:49
inc0pabelanger: so this just merged but images are still old https://review.openstack.org/#/c/466738/20:50
inc0does it take time for tarballs to update?20:50
inc0(by time I mean <1hr)20:50
inc0>1hr20:50
inc0Friday..20:50
pabelangerinc0: all depends on how long your post jobs take to run20:51
openstackgerritwes hayutin proposed openstack-infra/tripleo-ci master: WIP: organize the tripleo ci configurations and playbooks  https://review.openstack.org/47277720:51
pabelangerI see some still running on http://status.openstack.org/zuul20:51
inc0ahh right, I see it now, sorry20:51
*** jbadiapa has joined #openstack-infra20:52
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107920:54
openstackgerritMerged openstack-infra/project-config master: Upgrade experimental tempest-dsvm-neutron-full-opensuse-422-nv to non-voting  https://review.openstack.org/47107120:55
fungidirk: ^20:56
openstackgerritBrianna Poulos proposed openstack-infra/project-config master: Change Barbican Tempest Plugin Gate to Voting  https://review.openstack.org/47282120:56
*** bobh has quit IRC20:56
*** jamesmcarthur has joined #openstack-infra20:57
*** annegentle has quit IRC20:58
*** annegentle has joined #openstack-infra20:58
jeblairfungi, clarkb, mordred, pabelanger, SpamapS: what git repo/pypi package name should i use for a sphinx plugin for zuul job documentation?  "zuul-sphinx"?20:59
*** Apoorva_ has joined #openstack-infra20:59
*** annegentle has quit IRC20:59
fungisphinx-extension-zuul? not sure what the convention is21:00
pabelangersphinxcontrib-foobar seems to be a thing21:01
pabelangeras does sphinx-foobar21:01
jeblairthere's 'oslosphinx' and 'sphinxcontrib-programoutput'21:01
openstackgerritMerged openstack-infra/zuul feature/zuulv3: Fix git ssh env in merger  https://review.openstack.org/47278821:01
*** Goneri has quit IRC21:01
jeblairsphinxcontrib.foo seems like a problematic pattern though (packages sharing a namespace?)21:02
*** jamesmcarthur has quit IRC21:02
jeblairhttps://sphinxext-survey.readthedocs.io/en/latest/domains.html21:03
pabelangerya, zuul-sphinx is fine by me. Will defer to group21:03
*** Apoorva has quit IRC21:03
jeblairhttps://bitbucket.org/birkenfeld/sphinx-contrib/21:03
*** gordc has quit IRC21:03
mordredjeblair: zuul-sphinx works for me - as does sphinx-extension-zuul21:04
*** gardlt has quit IRC21:06
*** trown is now known as trown|outtypewww21:06
openstackgerritMerged openstack-infra/zuul feature/zuulv3: Fix zuul_streamer send() call for py35  https://review.openstack.org/47281621:06
*** gardlt has joined #openstack-infra21:07
fungioh, right, sphinxcontrib-zuul could be a thing21:07
fungiso many color opportunities for this bikeshed21:07
*** gordc has joined #openstack-infra21:08
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107921:10
*** gardlt has quit IRC21:11
clarkbmy terminal can support 25621:12
*** pblaho has quit IRC21:12
openstackgerritPete Birley proposed openstack-infra/project-config master: New project - OpenStack-Spaceport  https://review.openstack.org/47279121:12
*** shardy has quit IRC21:13
openstackgerritJames E. Blair proposed openstack-infra/project-config master: Add zuul-sphinx project  https://review.openstack.org/47282321:14
*** ldnunes has quit IRC21:15
jeblairsome can support 16 million21:16
*** makowals has joined #openstack-infra21:16
*** armax has joined #openstack-infra21:16
jeblairclarkb, fungi: can one of you ack https://review.openstack.org/472487 ?21:16
fungimy terminal does 8 colors with two intensities21:19
fungipabelanger: sudo failure as zuul on ze01 is you?21:20
*** amoralej is now known as amoralej|off21:21
*** dimtruck is now known as zz_dimtruck21:25
jeblairfungi: me21:27
fungijeblair: cool--thanks!21:27
*** jkilpatr has quit IRC21:28
*** panda is now known as panda|off21:30
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Don't wait for forever to join streamer  https://review.openstack.org/47283921:34
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Use display.display for executor debug messages  https://review.openstack.org/47284021:34
*** jiaohaolin1 has joined #openstack-infra21:36
*** askb has joined #openstack-infra21:39
*** jiaohaolin has quit IRC21:40
*** felipemonteiro__ has quit IRC21:40
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul feature/zuulv3: WIP: add log streaming test  https://review.openstack.org/47107921:41
openstackgerritMichal Jastrzebski (inc0) proposed openstack-infra/project-config master: Multinode gates, dockerhub publisher prework  https://review.openstack.org/47142821:43
*** EricGonczer_ has quit IRC21:44
*** esberglu has quit IRC21:44
*** JudeC has quit IRC21:45
jeblairstarting zuul-executor on ze01 and restarting zuul on zuulv321:46
*** EricGonczer_ has joined #openstack-infra21:46
openstackgerritClark Boylan proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284221:47
*** JudeC has joined #openstack-infra21:47
clarkbjeblair: fungi ^ ok thats a fun bit of bash, I think I commented it well enough. I have tested the individual bits locally as I've gone along but not in aggregate. THinking maybe easiest way is to just run that script in foreground on mirror-update after I get some quick review on it?21:48
clarkbI already see a bug :)21:50
openstackgerritClark Boylan proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284221:50
*** makowals has quit IRC21:50
openstackgerritJames E. Blair proposed openstack-infra/openstack-zuul-jobs master: Change image to label  https://review.openstack.org/47284521:52
jeblairi'm self-approving that ^21:52
openstackgerritMerged openstack-infra/openstack-zuul-jobs master: Change image to label  https://review.openstack.org/47284521:52
*** jamesdenton has joined #openstack-infra21:53
*** mdrabe has quit IRC21:53
openstackgerritMichal Jastrzebski (inc0) proposed openstack-infra/project-config master: Multinode gates, dockerhub publisher prework  https://review.openstack.org/47142821:54
dirkfungi: woohoo, thanks!21:56
dirkfungi: (or others) quick question: I've seen the "integrated-gate" template in the zuul config, which defines a consistent set of voting check and gate jobs for all the core set of projects. Interestingly it also defines experimental gate jobs, but no non-voting jobs. is that by design? I was thinking about adding a non-voting opensuse check either in the experimental or even in the check queue there21:57
*** chlong has quit IRC21:58
clarkbdirk: all experimental jobs are nonvoting because that pipeline can't vote. I think it would be fine to add the suse job there. Typically we want broader consensus before adding it to check/gate for projects though21:58
fungidirk: i don't know that we have much precedent for adding jobs to that, but my gut says we've mostly deferred to the qa team on that template21:58
*** jamesmcarthur has joined #openstack-infra21:59
*** kphatak has joined #openstack-infra21:59
*** gardlt has joined #openstack-infra21:59
kphatakI am referring to openstack/mors project. I am an admin for launchpad team mors-drivers for the project. I am not able to merge any code commits on gerrit. I understand that I need to be part of mors-core and mors-release group on gerrit. But neither me nor owner of mors project Roopak Parikh are able to add anything into those groups https://review.openstack.org/#/admin/groups/1556,members22:02
clarkbkphatak: do you have a link to the change that added the new project? as part of the project creation a gerrit admin has to seed the groups with an initial member. I'm happy to do that now if you can point me to the chagne that created the project22:04
*** jamesmcarthur has quit IRC22:04
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Use display.display for executor debug messages  https://review.openstack.org/47284022:04
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Don't wait for forever to join streamer  https://review.openstack.org/47283922:04
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Use threads instead of processes in zuul_stream  https://review.openstack.org/47285022:04
*** gardlt has quit IRC22:04
*** dave-mccowan has quit IRC22:06
*** dave-mccowan has joined #openstack-infra22:07
jeblairpabelanger: ze01 cannot ssh into nodes with the key that it has22:07
jeblairmoreover, i cannot ssh into those nodes as root22:07
*** rfolco has quit IRC22:08
*** EricGonczer_ has quit IRC22:10
jeblairi'll shut down zuulv3 for now22:11
*** EricGonczer_ has joined #openstack-infra22:11
*** wolverineav has quit IRC22:14
*** wolverin_ has joined #openstack-infra22:14
*** esberglu has joined #openstack-infra22:15
*** xarses has quit IRC22:16
clarkbI don't see the issue with my shell script that bashate is complaining about22:16
clarkbE040: Syntax error: syntax error: unexpected end of file: ''22:17
pabelangerjeblair: okay, I'll poke around and see why. Make sure we have the correct private key for the zuul user22:17
*** rcernin has quit IRC22:19
jeblairpabelanger: yeah, that's one question, and why is there no ~root/.ssh/authorized_keys is another22:19
jeblairare these the same images we're using in prod, or does zuulv3 have its own images now?22:19
pabelangerjeblair: I think because we are mirring infra-root key for nl01.o.o?22:19
pabelangerthey are the same images22:20
openstackgerritClark Boylan proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284222:20
*** esberglu has quit IRC22:20
pabelangermissing*22:20
clarkbok I think that is it, error was like 80 lines before the specified line. Ya syntax errors22:20
pabelangerjeblair: ya, nodepoolv3.yaml is missing our key-name setting. So we are not booting these images with the keypair from cloud22:21
jeblairpabelanger: oh, right, that's *launch* time now22:21
jeblairmakes sense22:21
*** xyang1 has quit IRC22:21
mordredclarkb: nice idea!22:21
jeblairpabelanger: cool.  so the other one is probably just another wrong key22:21
openstackgerritMichal Jastrzebski (inc0) proposed openstack-infra/project-config master: Multinode gates, dockerhub publisher prework  https://review.openstack.org/47142822:21
openstackgerritJames E. Blair proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284222:22
jeblairclarkb: sorry, i had to edit the commit message22:22
pabelangerjeblair: looks like we placed the jenkins user SSH private key on ze01.o.o, using jenkins user works22:22
jeblairI have learned recently: There is no force so great as the desire to edit someone else's copy.22:23
pabelangershould be able to update zuul-executor private hieradata with proper keys22:23
jeblairpabelanger: cool22:23
pabelangergive me a few minutes and I can update our configuration in hiera22:23
*** ihrachys has quit IRC22:25
*** rbrndt has quit IRC22:26
pabelangerjeblair: keys updated, ze01.o.o kicked. Was able to login with zuul user now22:29
jeblairclarkb: left some suggestions on 472842; generally lgtm22:30
jeblairpabelanger: cool, i'll restart22:30
pabelangerack22:30
pabelangerI'll work on nodepoolv3.yaml change too22:30
clarkbjeblair: thanks will update shortly22:31
*** r-daneel has quit IRC22:34
*** claudiub has quit IRC22:34
openstackgerritPaul Belanger proposed openstack-infra/project-config master: Switch to flavor-name for nodepoolv3.yaml  https://review.openstack.org/47285322:41
openstackgerritPaul Belanger proposed openstack-infra/project-config master: Add infra-root-keys to nodepoolv3.yaml  https://review.openstack.org/47285422:41
kphatakclarkb: https://review.openstack.org/#/c/351956/ change which created openstack-mors project22:43
openstackgerritClark Boylan proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284222:45
clarkbjeblair: ^ updated22:45
clarkbkphatak: ok I have added rparikh to the two groups created by that change as rparikh was the new project creator. They should now be able to add who they like to the gerrit groups22:47
kphatakcool. thanks22:47
*** rlandy has quit IRC22:47
*** bobh has joined #openstack-infra22:49
*** bobh has quit IRC22:49
*** kphatak has quit IRC22:50
*** jamesmcarthur has joined #openstack-infra22:56
*** salv-orl_ has quit IRC22:56
openstackgerritClark Boylan proposed openstack-infra/system-config master: Run vos release only when necessary  https://review.openstack.org/47284222:57
*** salv-orlando has joined #openstack-infra22:57
clarkbI'm going to release the bandersnatch lock now. I don't think I will get around to testing ^ before weekending but will regrab lock early next week to test it and hopefully get it running22:58
*** dougshelley66 has joined #openstack-infra22:59
openstackgerritPaul Belanger proposed openstack-infra/openstack-zuul-roles master: Remove params for zuul_console  https://review.openstack.org/47285923:00
pabelangerjeblair: mordred ^23:00
*** amoralej|off is now known as amoralej23:00
openstackgerritYolande Amate proposed openstack-infra/jenkins-job-builder master: Update artifactory_common_details to make use of convert_mapping_to_xml  https://review.openstack.org/47286023:01
*** jamesmcarthur has quit IRC23:01
*** salv-orlando has quit IRC23:01
*** jamesdenton has quit IRC23:01
jeblairpabelanger: is it valid to have nothing after the : ?23:02
pabelangerI _think_ so23:02
mordredjeblair: yes it is23:02
mordredI have a local playbook I use that does that23:02
pabelangerdon't use that syntax much my self23:02
pabelangerfinger b82946f7a81a496bbfa45451606c34b2@ze01.openstack.org23:03
jeblairhuh.  ends up as None.23:03
pabelangerseems better23:03
jeblairok.23:03
openstackgerritMerged openstack-infra/openstack-zuul-roles master: Remove params for zuul_console  https://review.openstack.org/47285923:03
*** EricGonczer_ has quit IRC23:07
*** EricGonczer_ has joined #openstack-infra23:08
*** kgiusti has left #openstack-infra23:09
*** EricGonczer_ has quit IRC23:09
openstackgerritPaul Belanger proposed openstack-infra/openstack-zuul-roles master: Add libffi development headers for ansible / ansible-lint  https://review.openstack.org/47286123:09
*** dizquierdo has joined #openstack-infra23:13
openstackgerritMichal Jastrzebski (inc0) proposed openstack-infra/project-config master: Multinode gates, dockerhub publisher prework  https://review.openstack.org/47142823:15
*** zz_dimtruck is now known as dimtruck23:17
*** tommylikehu has quit IRC23:23
*** tommylikehu has joined #openstack-infra23:24
*** jamesmcarthur has joined #openstack-infra23:26
openstackgerritMonty Taylor proposed openstack-infra/openstack-zuul-jobs master: Stop console log streaming on remote host  https://review.openstack.org/47286623:28
*** jamesmcarthur has quit IRC23:30
*** jamesdenton has joined #openstack-infra23:32
*** gardlt has joined #openstack-infra23:36
*** wolverin_ has quit IRC23:36
*** wolverineav has joined #openstack-infra23:36
*** gordc has quit IRC23:40
*** armax has quit IRC23:41
*** wolverineav has quit IRC23:42
*** armax has joined #openstack-infra23:42
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Add shutdown option for zuul_console  https://review.openstack.org/47286723:43
*** dizquierdo has quit IRC23:44
*** armax has quit IRC23:45
openstackgerritMonty Taylor proposed openstack-infra/zuul feature/zuulv3: Add shutdown option for zuul_console  https://review.openstack.org/47286723:47
openstackgerritMonty Taylor proposed openstack-infra/openstack-zuul-jobs master: Stop console log streaming on remote host  https://review.openstack.org/47286623:47
mordredclarkb, jeblair, pabelanger: ^^ and there's using it23:47
*** gaelL has quit IRC23:48
pabelangermordred: noticed http://paste.openstack.org/show/612170/ on ze01.o.o also23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!