Sunday, 2018-04-15

*** tosky has quit IRC00:01
*** yamamoto has joined #openstack-infra00:12
*** yamamoto has quit IRC00:17
*** imacdonn has quit IRC00:58
*** dave-mccowan has joined #openstack-infra01:03
*** yamamoto has joined #openstack-infra01:06
*** yamamoto has quit IRC01:13
*** jamesmcarthur has joined #openstack-infra01:15
*** dave-mccowan has quit IRC01:18
*** dulek has quit IRC01:23
*** dulek has joined #openstack-infra01:23
*** agopi_ has quit IRC01:31
*** agopi_ has joined #openstack-infra01:32
*** HeOS has quit IRC01:36
*** r-daneel has joined #openstack-infra01:36
*** agopi_ has quit IRC01:41
*** agopi_ has joined #openstack-infra01:41
*** salv-orlando has joined #openstack-infra01:46
*** salv-orl_ has quit IRC01:49
*** dulek has quit IRC01:50
*** jamesmcarthur has quit IRC01:50
*** dmellado has quit IRC01:51
*** stevebaker has quit IRC01:51
*** dmellado has joined #openstack-infra01:51
*** zoli has quit IRC01:51
*** gouthamr has quit IRC01:51
*** dulek has joined #openstack-infra01:54
*** stevebaker has joined #openstack-infra01:55
*** gouthamr has joined #openstack-infra01:58
*** zoli has joined #openstack-infra01:59
*** yamamoto has joined #openstack-infra02:09
*** yamamoto has quit IRC02:15
*** eernst has joined #openstack-infra02:57
*** eernst has quit IRC02:59
*** jamesmcarthur has joined #openstack-infra03:06
*** yamamoto has joined #openstack-infra03:11
*** yamamoto has quit IRC03:17
*** ihar has joined #openstack-infra03:17
*** aviau has quit IRC03:18
*** aviau has joined #openstack-infra03:18
*** ihar has quit IRC03:32
*** ihar has joined #openstack-infra03:37
*** janki has joined #openstack-infra03:39
*** sambetts_ has quit IRC03:42
*** sambetts_ has joined #openstack-infra03:43
*** sambetts_ has quit IRC03:54
*** sambetts_ has joined #openstack-infra03:56
*** mriedem has quit IRC03:59
*** pbourke_ has quit IRC04:04
*** pbourke_ has joined #openstack-infra04:04
*** hongbin has quit IRC04:07
*** jamesmcarthur has quit IRC04:07
*** jchhatbar has joined #openstack-infra04:10
*** yamamoto has joined #openstack-infra04:13
*** janki has quit IRC04:13
*** dhajare has joined #openstack-infra04:17
*** jchhatba_ has joined #openstack-infra04:17
*** hwoarang has quit IRC04:18
*** yamamoto has quit IRC04:18
*** jchhatbar has quit IRC04:20
*** jamesmcarthur has joined #openstack-infra04:26
*** jamesmcarthur has quit IRC04:30
*** snapiri has joined #openstack-infra04:34
*** jogo has quit IRC05:01
*** dsariel has joined #openstack-infra05:08
*** jogo has joined #openstack-infra05:13
*** psachin has joined #openstack-infra05:13
*** yamamoto has joined #openstack-infra05:15
*** yamamoto has quit IRC05:19
*** ihar has quit IRC05:21
dirkpabelanger: yw05:48
*** oanson has joined #openstack-infra05:52
*** armaan has joined #openstack-infra05:53
*** e0ne has joined #openstack-infra05:54
*** sambetts_ has quit IRC05:54
*** sambetts_ has joined #openstack-infra05:56
*** oanson has quit IRC06:01
*** oanson has joined #openstack-infra06:02
*** e0ne has quit IRC06:03
*** pcichy has joined #openstack-infra06:14
*** yamamoto has joined #openstack-infra06:15
*** iranzo has joined #openstack-infra06:17
*** yamamoto has quit IRC06:20
*** dhajare has quit IRC06:26
*** dbecker has quit IRC06:32
*** lpetrut has joined #openstack-infra06:38
*** dbecker has joined #openstack-infra06:45
*** dhajare has joined #openstack-infra06:59
*** yamamoto has joined #openstack-infra07:00
*** masber has joined #openstack-infra07:08
openstackgerritMerged openstack-infra/project-config master: unpause Gentoo  https://review.openstack.org/56128507:10
*** armaan has quit IRC07:26
*** slaweq has joined #openstack-infra07:27
*** jchhatba_ has quit IRC07:31
*** janki has joined #openstack-infra07:31
*** dpawlik has quit IRC07:33
*** sambetts_ has quit IRC07:36
*** sambetts_ has joined #openstack-infra07:38
*** janki has quit IRC07:40
*** armaan has joined #openstack-infra07:48
*** lpetrut has quit IRC07:58
*** agopi_ has quit IRC08:09
*** lihi has joined #openstack-infra08:16
*** salv-orl_ has joined #openstack-infra08:18
*** salv-orlando has quit IRC08:18
*** lpetrut has joined #openstack-infra08:24
*** nmagnezi has left #openstack-infra08:31
*** lpetrut has quit IRC08:34
*** lpetrut has joined #openstack-infra08:34
*** yamamoto has quit IRC08:37
*** lpetrut has quit IRC08:39
*** pas-ha has joined #openstack-infra08:40
*** dbecker has quit IRC08:55
*** lpetrut has joined #openstack-infra08:56
*** psachin has quit IRC09:05
*** armaan has quit IRC09:17
*** jamesmcarthur has joined #openstack-infra09:27
*** jamesmcarthur has quit IRC09:31
*** yamamoto has joined #openstack-infra09:38
*** armaan has joined #openstack-infra09:38
*** pcaruana has joined #openstack-infra09:38
*** slaweq has quit IRC09:39
*** slaweq has joined #openstack-infra09:39
*** tom-shan has joined #openstack-infra09:41
*** lpetrut has quit IRC09:41
*** yamamoto has quit IRC09:44
*** slaweq has quit IRC09:44
*** tom-shan has quit IRC09:44
*** yamamoto has joined #openstack-infra10:16
*** lpetrut has joined #openstack-infra10:34
*** armaan has quit IRC10:38
*** HeOS has joined #openstack-infra10:45
*** xinliang has quit IRC10:48
*** hwoarang has joined #openstack-infra10:57
*** xinliang has joined #openstack-infra11:00
*** jrist has quit IRC11:27
*** jrist has joined #openstack-infra11:27
*** yamamoto has quit IRC11:28
*** hwoarang has quit IRC11:28
*** hwoarang has joined #openstack-infra11:28
*** krenczewski has quit IRC11:36
*** slaweq has joined #openstack-infra11:54
*** slaweq has quit IRC11:59
*** yamamoto has joined #openstack-infra12:14
openstackgerritOmer Anson proposed openstack-infra/project-config master: Remove legacy job: legacy-install-dsvm-dragonflow-kuryr-kubernetes  https://review.openstack.org/56145912:27
openstackgerritOmer Anson proposed openstack-infra/openstack-zuul-jobs master: Remove legacy job: install-dsvm-dragonflow-kuryr-kubernetes  https://review.openstack.org/56146012:29
*** yamamoto has quit IRC12:32
mordredpabelanger: projects using stestr install it as part of test-requirements.txt - however, the thing we get in os-testr fromthat venv is subunit2html that we use for reports12:34
mordredpabelanger: roles/fetch-subunit-output/tasks/find-subunit-html.yaml in zuul-jobs12:34
mordredpabelanger: if we add something to that role to install subunit2html if it's not found... like an ensure-subunit2html role - then I think we can get rid of that venv12:35
*** sshnaidm|off has quit IRC12:38
*** HeOS has quit IRC12:41
*** dpawlik has joined #openstack-infra12:46
*** dpawlik has quit IRC12:51
*** sambetts_ has quit IRC12:55
*** sambetts_ has joined #openstack-infra12:55
*** lpetrut has quit IRC12:55
*** dayou has quit IRC13:17
*** dayou has joined #openstack-infra13:18
*** lpetrut has joined #openstack-infra13:26
*** jamesmcarthur has joined #openstack-infra13:28
*** jamesmcarthur has quit IRC13:33
*** yamamoto has joined #openstack-infra13:33
*** sambetts_ has quit IRC13:36
*** gema has quit IRC13:38
*** sambetts_ has joined #openstack-infra13:39
*** yamamoto has quit IRC13:39
*** gema has joined #openstack-infra13:40
*** gema has joined #openstack-infra13:40
*** d0ugal has quit IRC13:46
*** sshnaidm|off has joined #openstack-infra13:55
*** d0ugal has joined #openstack-infra13:56
*** nicolasbock has joined #openstack-infra14:10
*** sambetts_ has quit IRC14:25
*** sambetts_ has joined #openstack-infra14:27
*** sshnaidm|off is now known as sshnaidm14:31
*** slaweq has joined #openstack-infra14:35
*** yamamoto has joined #openstack-infra14:35
*** slaweq has quit IRC14:39
*** yamamoto has quit IRC14:41
*** bobh has joined #openstack-infra14:45
*** lpetrut has quit IRC14:51
*** r-daneel has quit IRC14:56
*** sambetts_ has quit IRC14:59
*** sambetts_ has joined #openstack-infra15:00
*** lpetrut has joined #openstack-infra15:03
*** jbadiapa has joined #openstack-infra15:04
*** d0ugal has quit IRC15:13
*** VW has joined #openstack-infra15:20
*** jtomasek has joined #openstack-infra15:21
*** dsariel has quit IRC15:31
pabelangermordred: ah, right thanks! I'll maybe look into that this week15:31
*** yamamoto has joined #openstack-infra15:37
*** snapiri has quit IRC15:38
*** dhajare has quit IRC15:39
*** d0ugal has joined #openstack-infra15:40
*** yamamoto has quit IRC15:42
*** snapiri has joined #openstack-infra15:43
openstackgerritPaul Belanger proposed openstack-infra/project-config master: Revert "unpause Gentoo"  https://review.openstack.org/56146615:44
pabelangerAJaeger: prometheanfire: ^ gentoo hasn't been setup to work with project-config elements, so we'll need to pause again15:48
*** psachin has joined #openstack-infra15:51
pabelangerprometheanfire: ianw: also, it seems pip-and-virtualenv for gentoo doesn't actually install get-pip.py for source installs. I think we need to fix that to bring gentoo images online, as we want to have the same version of pip across all our images15:52
pabelangereg: http://git.openstack.org/cgit/openstack/diskimage-builder/tree/diskimage_builder/elements/pip-and-virtualenv/install.d/pip-and-virtualenv-source-install/04-install-pip#n10615:52
openstackgerritMerged openstack-infra/project-config master: Revert "unpause Gentoo"  https://review.openstack.org/56146615:59
*** iranzo has quit IRC16:00
*** lpetrut has quit IRC16:08
*** lpetrut has joined #openstack-infra16:09
*** VW has quit IRC16:09
*** VW has joined #openstack-infra16:19
*** VW has quit IRC16:29
*** slaweq has joined #openstack-infra16:33
*** yamamoto has joined #openstack-infra16:38
*** slaweq has quit IRC16:43
*** yamamoto has quit IRC16:43
*** lbragstad has joined #openstack-infra16:52
*** dsariel has joined #openstack-infra16:53
*** dhajare has joined #openstack-infra16:53
*** jamesmcarthur has joined #openstack-infra16:54
*** jbadiapa has quit IRC17:07
*** jbadiapa has joined #openstack-infra17:08
snapiriHi Infra, cross-posting here from dev:  a new issue is failing builds. It seems like the pip behaviour (at least on ubuntu) has changed, and now it is failing on uninstall of distutils packages17:12
snapirisee: http://logs.openstack.org/41/554241/24/gate/dragonflow-dsvm-fullstack-redis/ef5da31/logs/devstacklog.txt.gz#_2018-04-15_09_09_03_09417:12
snapiriit succeeded until today: http://logs.openstack.org/41/554241/24/check/dragonflow-dsvm-fullstack-redis/f988d50/logs/devstacklog.txt.gz#_2018-04-11_11_28_53_07517:12
snapirifrom what I see the only problematic package is psutil, and I suspect it is because of https://github.com/openstack-dev/devstack/blob/master/files/debs/dstat#L217:12
snapiricould anyone please confirm?17:12
clarkbsnapiri: yes its due to the pip 10 release. We've known about it for a while now and there are a couple dev mailing list thread about it17:14
snapirithis is the price of backlogging on the mailing list :)17:15
snapirifor me17:15
snapirithanks!17:15
*** bobh has quit IRC17:19
*** dsariel has quit IRC17:29
*** lbragstad has quit IRC17:30
*** bobh has joined #openstack-infra17:31
*** jamesmcarthur has quit IRC17:33
*** bobh has quit IRC17:36
*** sshnaidm has quit IRC17:38
*** yamamoto has joined #openstack-infra17:40
*** snapiri has quit IRC17:43
*** yamamoto has quit IRC17:46
fungisnapiri: also, it's mainly an issue for devstack-based jobs, so a more appropriate irc channel for those discussions is probably #openstack-qa17:46
*** bobh has joined #openstack-infra17:46
*** bobh has quit IRC17:50
*** sshnaidm has joined #openstack-infra17:54
*** d0ugal has quit IRC17:55
*** psachin has quit IRC17:55
*** bobh has joined #openstack-infra17:56
*** jamesmcarthur has joined #openstack-infra18:00
*** bobh_ has joined #openstack-infra18:00
*** bobh has quit IRC18:00
*** pcichy has quit IRC18:02
*** e0ne has joined #openstack-infra18:05
*** bobh_ has quit IRC18:05
*** d0ugal has joined #openstack-infra18:09
*** bobh has joined #openstack-infra18:12
*** bobh has quit IRC18:16
*** hongbin has joined #openstack-infra18:20
*** bobh has joined #openstack-infra18:21
*** bobh has quit IRC18:26
prometheanfirepabelanger: ok, are there bugs?18:28
*** bobh has joined #openstack-infra18:34
*** slagle has joined #openstack-infra18:37
*** bobh has quit IRC18:39
*** yamamoto has joined #openstack-infra18:42
*** bobh has joined #openstack-infra18:44
*** yamamoto has quit IRC18:47
*** bobh has quit IRC18:49
*** bobh has joined #openstack-infra18:52
*** jamesmcarthur has quit IRC18:53
*** jamesmcarthur has joined #openstack-infra18:54
pabelangerprometheanfire: yah, should be able to reproduce with tools/build-image.sh in project-config18:54
pabelanger  2018-04-15 15:37:10.971 | Failed to enable unit, unit iptables.service does not exist.18:54
pabelangerwas error18:54
pabelangerbut, http://nb01.openstack.org should have logs18:54
pabelangerbut seems down for me18:54
pabelangerclarkb: fungi: are you able to hit HTTP on nb01.o.o or nb02.o.o ?18:55
prometheanfirepabelanger: ok, I wonder if iptables wasn't installed or something18:56
prometheanfire/lib/systemd/system/iptables-restore.service18:56
prometheanfireI guess on gentoo we use a diferent name (store/restore variants of ip and ip6)18:56
pabelangerprometheanfire: let me get a build log, since http isn't working18:56
*** bobh has quit IRC18:57
pabelangerprometheanfire: https://pabelanger.fedorapeople.org/gentoo-17-0-systemd-0000000757.log19:00
pabelangerprometheanfire: let me know when you have it19:00
prometheanfirethanks19:00
prometheanfiresaved19:00
pabelangerkk, removing19:00
prometheanfireso, that's a dib thing (the iptables)?19:01
pabelangeryah, it is our elements in project-config: http://git.openstack.org/cgit/openstack-infra/project-config/tree/nodepool/elements/19:01
pabelangerhttp://git.openstack.org/cgit/openstack-infra/project-config/tree/tools/build-image.sh will be an easy way to build it locally and test19:02
prometheanfireok, those then19:02
prometheanfirepabelanger: so I imagine you want ip6tables too?19:02
*** bobh has joined #openstack-infra19:04
pabelangerprometheanfire: yah, we setup both ipv4 / ipv6 rules on images19:04
prometheanfireok19:04
prometheanfireso I have 4 services to enable19:04
*** iranzo has joined #openstack-infra19:07
*** iranzo has quit IRC19:07
*** iranzo has joined #openstack-infra19:07
*** jtomasek has quit IRC19:07
*** bobh has quit IRC19:08
*** dhajare has quit IRC19:09
prometheanfirethis should do it19:10
openstackgerritMatthew Thode proposed openstack-infra/project-config master: enable the right iptables services on gentoo  https://review.openstack.org/56147219:10
*** slaweq has joined #openstack-infra19:11
openstackgerritMatthew Thode proposed openstack-infra/project-config master: enable the right iptables services on gentoo  https://review.openstack.org/56147219:12
openstackgerritMerged openstack-infra/system-config master: Add statusbot and enable logs for oooq IRC channel  https://review.openstack.org/55999919:15
pabelangerprometheanfire: cool, do you mind building the image to with patch to ensure everything else works properlly19:17
pabelangerproperly*19:17
prometheanfireya, I'm working on it now (build box needs some slight updating19:17
pabelangergreat19:18
*** bobh has joined #openstack-infra19:18
prometheanfireit looks like I still need to define the profile export for gentoo outside that script though19:20
*** claudiub|2 has quit IRC19:21
*** HeOS has joined #openstack-infra19:22
*** bobh has quit IRC19:23
prometheanfirelooks like the script runs cache-devstack and the gentoo image by default does not19:23
prometheanfireprobably because it's not supposed to run devstack at this point, we'll see if it hurts anything I guess19:24
prometheanfireanyway, building now19:24
*** pcaruana has quit IRC19:24
*** armaan has joined #openstack-infra19:28
*** bobh has joined #openstack-infra19:33
*** imacdonn has joined #openstack-infra19:35
*** bobh has quit IRC19:38
*** slagle has quit IRC19:38
*** openstackstatus has quit IRC19:41
*** openstack has joined #openstack-infra19:43
*** ChanServ sets mode: +o openstack19:43
*** yamamoto has joined #openstack-infra19:43
*** bobh has quit IRC19:47
*** yamamoto has quit IRC19:48
*** bobh has joined #openstack-infra19:52
*** dpawlik has joined #openstack-infra19:56
*** bobh has quit IRC19:57
*** dave-mccowan has joined #openstack-infra20:02
pabelangerianw: clarkb: fungi: yah, Centos DIBs are failing because of pip1020:03
pabelanger2018-04-15 18:09:56.730 | Cannot uninstall 'virtualenv'. It is a distutils installed project and thus we cannot accurately determine which files belong to it which would lead to only a partial uninstall.20:03
pabelangerhave no idea how to best solve that20:03
pabelangerunless we pip install --user virtualenv20:04
pabelangerthen update everything to use that20:04
*** claudiub|2 has joined #openstack-infra20:05
*** nicolasbock has quit IRC20:05
*** e0ne has quit IRC20:06
fungipabelanger: any reason 1. that we're preinstalling virtualenv from rpm and 2. that we're attempting to pip upgrade it?20:07
fungiseems like we should only be doing one or the other in our image builds20:08
funginot installing the virtualenv rpm is probably the simplest solution if we can figure out what's causing it to get installed in the first place20:09
pabelangerfungi: I think we preinstall them to satisfy yum / dnf that virtualenv installed, then we overwrite it with a newer version. If we don't, I think the issue becomes, when somebody yum installs a python package that needs python-vritualenv, it will then overwrite our version installed via get-pip.py.20:11
clarkbya that20:12
clarkbbut hard to.avoid now20:12
pabelangerright20:12
*** yamamoto has joined #openstack-infra20:12
*** d0ugal_ has joined #openstack-infra20:12
fungiwhy would an rpm of a python library need virtualenv?20:13
fungithey just install into the system context anyway, right?20:13
pabelangerI am unsure, ianw likely best to answer that20:14
pabelangerwe do the same for APT too20:14
fungiseems like a manufactured problem to me, but i'm probably just missing some nuance there20:14
*** d0ugal has quit IRC20:14
clarkbon centos there is no split like with debuntu20:15
fungianyway, if we have stale images for a week or two while we work through pip 10 related image build failures, that's probably not the end of the world. nodepool protects us nicely in such a situation20:15
fungiclarkb: explicit split of what? virtualenv is a completely separate python package20:15
clarkb/usr/bin/virtualenv and /usr/local/bin/virtualenv20:16
clarkbon ubuntu its a total nonnissue I think20:16
fungiwell, if the ubuntu deb of virtualenv is built using distutils then it would be an issue all the same20:16
clarkbwith pip10 yes I mean the reason for preinstalling system packages20:17
clarkbon ubuntu just stop preinstalling and its fine. On centos you have have trouble if you install system virtualenv later20:17
pabelangerhttps://review.openstack.org/32747220:18
*** bobh has joined #openstack-infra20:18
pabelangerthat explains why we do it20:18
clarkbthat all said I think with pip10 we cant mix them at all20:18
clarkbso if you do prepare for fallout20:19
pabelangerso, we if update devstack to stop using package version of pip / virtualenv, etc, I think we might be able to revert it. But still doesn't protect of a job installing them and overwriting it20:19
fungioh, right i guess maybe we should uninstall whatever virtualenv package at the end of image builds once we're done creating virtual envs for various tools? that way jobs can install whichever one they want with no risk of conflict20:19
fungior do like i do on my personal systems... use distro-packaged virtualenv to bootstrap a virtualenv in which you pip install virtualenv (and then optionally uninstall the distro package of it once you do that) and use the virtualenv'd virtualenv to create other envs20:21
fungii also install tox into a virtualenv and call that rather than installing it globally20:21
*** bobh has quit IRC20:22
pabelangeryah, that seems like the way forward now20:22
fungijust put a symlink (from ~/bin/tox or /usr/local/bin/tox) into $venvdir/bin/tox20:22
clarkbdevstack doesnt use system virtualenv or pip iirc20:23
*** bobh has joined #openstack-infra20:23
pabelangerI guess we could also black list packages in apt / yum to prevent them from overwriting our version from get-pip.py20:24
fungii basically just maintain a virtualenv symlink farm and never `sudo pip install ...` anything at all20:24
clarkbhowever it does assume virtualenv exists if running in infra20:24
fungiwith the symlimk trick, we can provide a global virtualenv entrypoint executable without distro package or `sudo pip install ...`20:25
clarkbfungi: the problems we'll have are we have to use site system packages and educate on that. Also so many random things assume weord stuff20:25
clarkblike ironic and virtualbmc needing to su to get group membership updated which breaks PATH20:26
fungiyep, i'm sure it won't be straightforward and there will be ugly jagged edges20:26
fungidoes it stop having /usr/local/bin in its path when it does that?20:26
*** dpawlik has quit IRC20:27
clarkbno but you can symlink that to your venv it would have to be a different path to avoid breaking other things that use that path right?20:28
clarkb(thinking stuff like gems or npm)20:28
*** lbragstad has joined #openstack-infra20:28
*** bobh has quit IRC20:28
clarkbthe other issue is python2 and python3 cant live in one venv so you need two20:28
clarkband then some way to select into the right one20:29
fungisure, though that's not really an issue for, e.g., tox20:30
pabelangeryah, maybe we drop /usr/local/bin/virtualenv and have people juse python2 -m virtualenv / python3 -m virtualenv if they need to create it20:31
fungieven if you used sudo pip install or a distro package, the first entrypoint in your execution path will only ever use one python version20:31
pabelangerpip2 / pip3 are still things20:31
fungiright20:31
clarkbfungi: ya the problem is when you want swift under python2 and evrrything else under python320:32
fungithis is not really a pip 10 issue though, it's exactly the same under earlier pip20:32
clarkbyou cant just replace /usr/local/bin in that case20:32
fungiit really depends on what python application (not library) you're talking about20:33
*** VW has joined #openstack-infra20:33
pabelangeris python -m pip install a thing?20:33
*** iranzo has quit IRC20:33
*** bobh has joined #openstack-infra20:33
pabelangerlooks like it is20:34
fungiyeah20:34
clarkbthr approach I tried to take in devstack was python3env/bin was ahead of python2env/bin in PATH20:34
clarkbbut vouldnt replace /usr/local/bin with one or the other20:35
*** armaan has quit IRC20:35
clarkbthen ran out of time trying to convinve ironic to run virtualbmc in  way that didnt break PATH20:35
*** armaan has joined #openstack-infra20:35
*** bobh has quit IRC20:38
fungiif you `virtualenv -p python2.7 /opt/stack/python2venv && /opt/stack/python2venv/bin/pip install /opt/stack/swift && ln -s /opt/stack/venvs/swift/bin/swift /usr/local/bin/` or whatever you can control it that way, right?20:39
ianwpabelanger: or we just rm selected files to override pip20:40
ianwoverride pip's check20:40
clarkbfungi: only if you know every single command that needs to be symlinked20:40
fungifair20:41
fungiianw: genius! fake pip into thinking it's not installed so it will just shut up and get on with it20:43
*** lpetrut has quit IRC20:44
ianwthat's my first instinct here, because that's basically what it used to do anyway20:44
pabelangerhow would we do that?20:44
ianwrm /usr/lib/python2.7/site-packages/pip-* ; get-pip.py20:45
ianwapproximately20:45
ianwpabelanger: was there any progress on the glean xenial issues, or is that still outstanding too?20:46
pabelangerianw: yah, that is still outstanding. I was going to look more into it in the morning20:46
*** jbadiapa has quit IRC20:46
ianwthat has me seriously stumped right now.  all i can think is that it is udev not activating the rule20:47
*** jbadiapa has joined #openstack-infra20:47
ianwbut afaict, the version of everything between the bad and good images are the same (udev is all part of systemd packages, and didn't update)20:48
ianwhmm, why is http://nb01.openstack.org/ not showing me logs ...20:49
*** d0ugal_ has quit IRC20:50
pabelangerianw: yah, it is down for me too20:51
pabelangernoted it in backscroll20:51
ianwACCEPT     tcp  --  172.24.4.0/23        anywhere             tcp dpt:http20:54
*** d0ugal_ has joined #openstack-infra20:56
*** bobh has joined #openstack-infra20:57
ianwalso the rules on nb03 are different20:58
*** bobh has quit IRC21:00
*** bobh has joined #openstack-infra21:00
ianwhttps://github.com/open-switch/infra_system-config/blob/master/modules/openstack_project/manifests/single_use_slave.pp#L2721:01
*** armaan has quit IRC21:01
ianwsets up ports 8000, 8003, 8004 for devstack bits21:01
ianwACCEPT     tcp  --  172.24.4.0/23        anywhere             tcp dpt:800021:02
ianwACCEPT     tcp  --  172.24.4.0/23        anywhere             tcp dpt:800321:02
ianwACCEPT     tcp  --  172.24.4.0/23        anywhere             tcp dpt:800421:02
ianwwe've run devstack in the builders????21:02
*** slaweq has quit IRC21:05
*** l4yerffej has quit IRC21:05
*** bobh has quit IRC21:05
clarkbdevstacks image listing for caching may have had unexpected side effects?21:09
ianwwell i've restarted netfilter-persistent ... if this comes back however, we have some sort of chroot escape i guess :/21:09
ianwi can't see any simple smoking gun in auth.log where we've sudo run something21:09
ianwand it hasn't happened on nb03.o.o ... and that only builds xenial and debian, so it's likely something *other* that those two21:10
pabelangerianw: maybe gentoo or opensuse?21:10
pabelangerwe just brought gentoo online this week21:10
pabelangerbut it is paused currently21:10
*** armaan has joined #openstack-infra21:11
*** l4yerffej has joined #openstack-infra21:11
ianwit does look like http://git.openstack.org/cgit/openstack-infra/project-config/tree/nodepool/elements/nodepool-base/install.d/20-iptables#n46 was applied on the host21:12
*** bobh has joined #openstack-infra21:12
*** hongbin has quit IRC21:13
*** hongbin has joined #openstack-infra21:14
*** armaan has quit IRC21:15
fungii wonder if something is triggering a start/restart of netfilter-persistent (or equivalent) "service" in the chroot to apply the rules21:15
fungichroot on its own won't do anything to protect against that21:16
*** bobh has quit IRC21:16
pabelangerhttp://git.openstack.org/cgit/openstack-infra/project-config/tree/nodepool/elements/nodepool-base/install.d/20-iptables#n10521:17
pabelangermight be it21:17
pabelangeras we just brought gentoo online this weekend21:17
pabelangermaybe not, as opensuse above does the same21:18
clarkbpabelanger: its different though21:18
clarkbopensuse is in a heredoc21:18
clarkbso its not executing that, ist saving it for later21:18
ianwyeah, i think that gentoo bit would be it21:18
pabelangerclarkb: ah, right21:19
*** slaweq has joined #openstack-infra21:23
*** hongbin_ has joined #openstack-infra21:23
openstackgerritIan Wienand proposed openstack-infra/project-config master: Remove apply of iptables rules for gentoo  https://review.openstack.org/56147821:24
ianw^ that seems like the simplest thing21:24
*** bobh has joined #openstack-infra21:24
pabelanger+221:24
*** hongbin has quit IRC21:24
*** wolverineav has joined #openstack-infra21:24
pabelangerprometheanfire: heads up ^ is breaking nodepool-builders21:25
ianwprometheanfire: ^^ i'm not sure how you want to run the rule apply on gentoo.  something like netfilter-persistent, or a script to apply the rules21:25
ianwright, one yak shaved, now i can see the logs for the pip failures :)21:25
fungii'm sure gentoo has _something_ which applies iptables rules at boot time. there's really no way around doing at least that21:27
fungiwe just need to make sure whatever it is doesn't also trigger at image build time21:28
*** bobh has quit IRC21:29
*** bobh has joined #openstack-infra21:32
*** bobh has quit IRC21:36
*** hongbin has joined #openstack-infra21:37
*** bobh has joined #openstack-infra21:37
*** hongbin_ has quit IRC21:38
*** efried has quit IRC21:40
*** salv-orl_ has quit IRC21:40
*** efried has joined #openstack-infra21:40
*** salv-orlando has joined #openstack-infra21:41
prometheanfireianw: didn't you see my other patch?  The one enabling the iptables services for gentoo?21:41
prometheanfire2018-04-15 21:42:14.588 | (0797 / 1372)21:42
prometheanfiretaking forever :(21:42
ianwpromethanfire: no, but ok, we still need to stop that apply of the rules on the builder however21:43
prometheanfireianw: ok, so the problem is that the builder is applying the rules?  I'm guessing opensuse is bad too then?21:44
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Remove installed packages before pip install  https://review.openstack.org/56147921:44
ianwpromethanfire: no, opensuse is writing out a script to run on boot21:45
ianwpabelanger / fungi : ^^ to be tested, but that's my initial idea on this21:45
prometheanfireianw: ok, so, maybe just enabling the services will work for gentoo then (or fixing it) since those will load the rules21:46
*** hongbin_ has joined #openstack-infra21:51
ianwpromethanfire: you tell me, i'll believe you :)21:52
*** bobh has quit IRC21:52
*** slaweq has quit IRC21:52
*** armaan has joined #openstack-infra21:52
*** hongbin has quit IRC21:53
*** VW has quit IRC22:08
*** VW has joined #openstack-infra22:08
*** bobh has joined #openstack-infra22:09
*** VW has quit IRC22:10
*** bobh has quit IRC22:14
*** sambetts_ has quit IRC22:15
*** sambetts_ has joined #openstack-infra22:16
*** bobh has joined #openstack-infra22:21
*** bobh has quit IRC22:25
*** jbadiapa has quit IRC22:26
prometheanfireianw: yes22:26
*** rcernin has joined #openstack-infra22:26
*** jbadiapa has joined #openstack-infra22:26
*** bobh has joined #openstack-infra22:30
*** jbadiapa has quit IRC22:31
*** jbadiapa has joined #openstack-infra22:32
*** bobh has quit IRC22:35
*** r-daneel has joined #openstack-infra22:36
*** bobh has joined #openstack-infra22:40
*** rcernin has quit IRC22:45
*** rcernin has joined #openstack-infra22:46
*** bobh has quit IRC22:46
*** threestrands has joined #openstack-infra22:51
*** bobh has joined #openstack-infra22:52
*** bobh has quit IRC22:57
*** jamesmcarthur has quit IRC22:59
*** claudiub|2 has quit IRC23:03
*** lbragstad has quit IRC23:05
*** jamesmcarthur has joined #openstack-infra23:07
prometheanfire2018-04-15 23:10:18.737 | Couldn't parse 'functions-common: line 1301: rpm: command not found file /opt/cache/files/functions-common: line 1301: rpm: command not found /tmp/dib_build.Us7fIHQv/mnt/opt/git/openstack-dev/devstack/functions-common: line 1301: rpm: command not found' as a source repository23:11
*** hongbin_ has quit IRC23:12
*** bobh has joined #openstack-infra23:13
prometheanfirepabelanger: looks like devstack doesn't work on gentoo, as it was never suposed to, so build-image.sh should probably be modified to not hardcode the cache-devstack element23:15
*** bobh has quit IRC23:17
openstackgerritMatthew Thode proposed openstack-infra/project-config master: include cache-devstack only if not gentoo  https://review.openstack.org/56148523:21
*** bobh has joined #openstack-infra23:23
prometheanfirepabelanger ianw ^23:24
prometheanfiretesting it now23:24
*** stakeda has joined #openstack-infra23:28
*** bobh has quit IRC23:28
*** bobh has joined #openstack-infra23:32
*** jamesmcarthur has quit IRC23:32
*** bobh has quit IRC23:36
*** bobh has joined #openstack-infra23:42
pabelangerprometheanfire: cache-devstack is more then that, it gets all our git repos and images onto the gentoo image.  So, I think we'll want that, regardless of running devstack.23:45
*** bobh has quit IRC23:47
prometheanfirepabelanger: openstack-repos are still being cached23:47
prometheanfiresomething else is still pulling it in23:48
pabelangerprometheanfire: yah, it is a hard dependency on our builds23:49
pabelangerI don't think we can make it conditional for gentoo23:50
prometheanfirepabelanger: so I need to make devstack run on gentoo?23:50
prometheanfirethat's totally NOT what I want to do23:51
prometheanfireI don't think any of the OSA jobs run devstack23:51
*** jbadiapa has quit IRC23:51
prometheanfirewhat else other than caching the repos needs doing? (since that's still being done)23:51
ianwthere's room to consider what we're doing there; the caching of images is separate to the caching of the git trees23:52
pabelangernot run devstack, but ensure http://git.openstack.org/cgit/openstack-dev/devstack/tree/tools/image_list.sh works23:52
*** jbadiapa has joined #openstack-infra23:52
*** slaweq has joined #openstack-infra23:52
prometheanfirerun that after the image generation?23:54
pabelangerthe cache-devstack element does it dynamically on each branch, so without seeing the build log, hard to say what is failing23:54
*** bobh has joined #openstack-infra23:55
pabelangerbut, if you clone devstack to gentoo and run that script, should give an indication what is failing23:55
prometheanfireso... boot the generated image, clone devstack, run the script23:55
prometheanfirethat the test procedure?23:55
pabelangercan you pastebin the log of failure above? I am just guessing that is the issue23:56
prometheanfirenot sure it's still in backlog23:57
prometheanfirereverifying the cache of over 1k repos takes up a ton of log space23:57
*** slaweq has quit IRC23:57
prometheanfirehttps://gist.github.com/prometheanfire/1b4637e8fb2d92a8d237c407d704ceeb23:58
prometheanfiregood thing I extended it :D23:58
*** bobh has quit IRC23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!