Wednesday, 2020-02-26

fungigot it, so any in-repo job fixes for tag-triggered jobs will need a new tag00:00
clarkbthat is my hunch00:00
clarkbfor the same reason that jobs with branch restrictions don't apply to tags00:00
clarkbbasically the tag exists in its own mini universe without externally inferred state00:01
funginow i feel like i'm watching a string theory documentary00:02
corvusis that more approachable than "speculative execution"?00:03
fungithe many universes model of zuul00:03
*** mattw4 has quit IRC00:03
corvusi think clarkb is right; i also think our reliance on centrally defined jobs for tags and reluctance to replace tagged artifacts means this is largely unexplored space00:03
*** ociuhandu has joined #openstack-infra00:04
fungiokay, still no luck00:06
fungi2020-02-26 00:03:38,684 DEBUG zuul.layout: [e: 3a97242756fb4ba892843a01854b9460] No matching parents for job openstackid-release-branch and change <Tag 0x7f2e0c1c4320 osf/openstackid creates refs/tags/3.0.3 on 7dff48831caa6f4a808482669818ba338bd259f6>00:06
fungithat job is parented on publish-openstack-artifacts00:06
fungiwhich has no parents and no branch matchers00:07
fungiand the job doesn't itself have a branch matcher00:07
fungipublish-openstack-artifacts is defined in openstack/project-config so i shouldn't need to require the repo either00:08
fungii feel like i'm missing something very obvious00:08
clarkbits possible that the tag context is such that it can't find the parent jobs at all?00:08
corvusfungi: well, the previous line is telling:00:08
corvus2020-02-26 00:03:38,684 DEBUG zuul.layout: [e: 3a97242756fb4ba892843a01854b9460] Variant <Job openstackid-release-branch branches: {MatchAny:{BranchMatcher:master}} source: osf/op00:09
corvusenstackid/.zuul.yaml@master#1> did not match <Tag 0x7f2e0c1c4320 osf/openstackid creates refs/tags/3.0.3 on 7dff48831caa6f4a808482669818ba338bd259f6>00:09
fungiwhere is that branch matcher coming from?00:09
fungii must be blind00:09
*** ociuhandu has quit IRC00:09
corvusfungi: it's a branch matcher on the job itself because it's defined in a branched repo (openstackid has 2 branches)00:10
corvusit's possible this is the first time we've had that situation00:10
fungihuh00:10
corvusfungi: has this ever worked?00:10
corvus(was the last release using a job defined in project-config?)00:11
fungii don't think it has successfully released since moving jobs in-tree00:11
fungii'm trying to get the jobs rewritten to non-legacy because they were parented on jobs with branch matchers to start with00:11
fungiso just now ripped out a bunch of zuul-cloner cruft and copied in some novel bits from old jenkins slave scripts00:12
corvusfungi: i think a workaround for now would be to add "branches: .*" to the job defs00:12
corvusand https://review.opendev.org/578557 is real fix00:12
fungiwe could also consider deleting the 6-year-old feature/openid branch00:12
corvusthat would work too, i think00:12
fungismarcet: do you still need the feature/openid branch?00:12
fungilooks like it ceased use in 201300:14
*** eharney has quit IRC00:15
fungiand yeah, i agree this is probably the first case we have of a tag-triggered job in a repo with more than a master branch00:17
corvuswell maybe it's the second, after whatever prompted me to write 57855700:18
fungiheh00:18
*** nicolasbock has quit IRC00:18
smarcetfungi: nope we could delete it00:25
fungithanks smarcet! doing that now, then i'll reenqueue 3.0.300:26
*** eharney has joined #openstack-infra00:27
smarcetfungi: thx u00:27
fungi#status deleted unused branch feature/openid of project osf/openstackid previously at 7350bfc8f40a5735984271d2c13123df8c0872a0 with smarcet's approval00:28
openstackstatusfungi: unknown command00:28
fungi#status log deleted unused branch feature/openid of project osf/openstackid previously at 7350bfc8f40a5735984271d2c13123df8c0872a0 with smarcet's approval00:28
openstackstatusfungi: finished logging00:28
*** smarcet has quit IRC00:31
fungi2020-02-26 00:29:13,139 DEBUG zuul.layout: Variant <Job openstackid-release-branch branches: {MatchAny:{BranchMatcher:master}} source: osf/openstackid/.zuul.yaml@master#1> did not match <Tag 0x7f2dc4654e80 osf/openstackid creates refs/tags/3.0.3 on 7dff48831caa6f4a808482669818ba338bd259f6>00:32
fungidoes zuul know to clear branches when they're deleted from gerrit?00:32
*** kvenkata has quit IRC00:32
fungii confirmed it saw the deletion before that00:34
*** takamatsu has quit IRC00:35
ianw"msg": "Data could not be sent to remote host \"static.opendev.org\". Make sure this host can be reached over ssh: Host key verification failed.\r\n", ... the add_host documentation is pretty thin :/00:35
*** smarcet has joined #openstack-infra00:36
ianwdo you have to pre-add the host key to the local ssh config?00:37
fungithat is the safer solution00:37
ianwyeah, i mean i can't see a way to do it via add_host00:37
fungimaintaining an /etc/ssh/known_hosts list on all our servers has always seemed like it might be a good idea00:38
ianwwell this is in the executor for that 404 job00:38
fungior sshfp records, but you have to turn on support for those in the client config *and* be using dnssec everywhere00:38
*** smarcet has quit IRC00:39
*** smarcet has joined #openstack-infra00:41
clarkbianw: maybe you can add it via the known_hosts module?00:41
clarkb(I think that will depend on whether or not we let you write that file in the executors build context00:42
clarkbI don't know if that will work00:42
*** gshippey has quit IRC00:45
openstackgerritIan Wienand proposed opendev/system-config master: 404 periodic job : use executor only, add host key  https://review.opendev.org/70987400:45
ianwclarkb: ^ one way to find out! :)00:45
clarkbianw: how are you triggering it outside of periodic? I realized that wen eed to be careful with changes to it to ensure it runs post merge only00:47
fungiERROR! Invalid options for include_role: chdir00:47
fungioof00:47
ianwclarkb: i triggered it via an enqueue-ref00:47
clarkbfungi: I've run into that before. You can chdir on a block iirc00:47
clarkbianw: cool just making sure there wasn't some backdoor to getting it to run that would be unsafe00:48
ianwnot that i know of :)00:48
clarkbfungi: so you do something like block:chdir:include_role all at the same level00:48
fungioho, i also just discovered a missing bit of magic00:51
fungihttps://opendev.org/openstack/project-config/src/branch/master/zuul.d/projects.yaml#L4683-L468700:52
fungiwhich wasn't running until now because openstackid-release-master is defined in the osf/openstackid repo00:52
*** takamatsu has joined #openstack-infra00:52
clarkband because that was a branched repo it didn't apply to tag?00:54
clarkband now that it is unbranched it works?00:54
fungiyup00:55
fungieven succeeds http://zuul.opendev.org/t/openstack/build/7b525c8f232f44dd8289eb8861cca2a700:56
fungihttps://tarballs.opendev.org/osf/openstackid/openstackid-3.0.3.tar.gz exists and has a decidedly nonzero size00:57
*** rh-jelabarre has quit IRC00:58
clarkbfirefox turned on dns over https to cloudflare by default today. If you are like me and would prefer to continue using your own dns servers you can go to preferences -> general -> network settings -> uncheck box to use dns over https00:59
fungiclarkb: thanks for the heads up! looks like "Enable DNS over HTTPS" is still unchecked for me (thanks debian?) but i'll be sure to keep an eye on it01:00
fungii vaguely recall a lengthy debate on debian-devel about disabling that by default in packaged firefox01:01
clarkbI'm a bit torn on the change. For the vast majority of users using isp default dns servers its a huge benefit for security and privacy01:01
fungiwell, maybe01:02
clarkbbut for people that already care about security and privacy and have taken steps to address that its a major step back01:02
fungithat's also debatable01:02
clarkbfungi: it does require you to trust that cloudflare rotates their logs as they say they do and doesn't data mine the data as they say they don't01:02
fungiis the user's isp less trustworthy than cloudflare, who already also has a ton of their web browsing data to combine with their dns lookup data?01:02
clarkbbut you know that every major ISP is doing the opposite01:02
clarkbfungi: I definitely trust cloudflare more than my isp01:03
clarkbcomcast for example intentionally poisons dns to serve ads01:03
fungii get that. i personally trust neither and so have a hard time guessing which some users might trust more01:03
fungii think self-serving dns poison to generate advertising income is probably less of an overall risk than combining all the cdn access and dns lookups of a major swath of the internet into the hands of a single organization which promises to "do no evil"01:05
clarkbthats fair.01:05
*** rh-jelabarre has joined #openstack-infra01:05
fungiespecially since companies can't really make promises like that. at least in the usa they're treated like persons yet have none of the legal responsibilities of one01:06
fungiand if the gubment decides to lean on them so they can go on fishing expeditions, they could also be under a gag order to refrain from acknowledging that they're doing evil anyway01:08
clarkblooks like the dns over https resolver is customizable too so you could configure it that way, but ya cloudflare is default and it is on by default now01:08
fungiit's a move which makes me suspicious01:10
clarkbfungi: your isp will likely be a US company (if living in the US at least) and subject to the same issues01:11
clarkbreally I think the biggest concern is the other one you point out. They have significant amounts of data if they want to look at it01:11
fungiyup, but my isp is a much smaller chunk of overall internet traffic than "every site relying on cloudflare to terminate their ssl connections and most firefox users' dns)01:12
clarkbbut your ISP has the same data set modulo the ssl content that cloudflare hosts01:12
fungifor a much smaller number of clients01:12
fungiwhy would a three-letter organization prefer to spend time getting my and numerous other isps to send them all that when they can probably just get most of it from a single place?01:13
clarkbya that will depend on your ISP probably. My hunch is that comcast and maybe one or two others are in the same category01:14
clarkbfungi: because the isp has insight into every connection not just the ones that pass through a psecific cdn01:14
clarkbgranted that cdn is popular and covers a lot of ground01:14
fungiyep, though the isp just knows the ip addresses you're communicating with, the protocols and some info about packet sizes/timing01:15
fungiassuming https traffic01:15
clarkbalso domain names due to sni01:15
fungiyep, true, sni is prevalent now01:15
fungicloudflare on the other hand technically has access to all plaintext for sites it's acting as an ssl terminating cdn at01:16
openstackgerritMerged opendev/system-config master: zuul-user: add role to install system-config key  https://review.opendev.org/70986501:20
openstackgerritsebastian marcet proposed opendev/system-config master: OpenStackId v3.0.3 Deployment  https://review.opendev.org/70992601:21
openstackgerritMerged opendev/system-config master: static: add static.openstack.org/files.openstack.org  https://review.opendev.org/70904201:25
openstackgerritIan Wienand proposed opendev/system-config master: static: provide git services  https://review.opendev.org/70940301:28
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963901:28
openstackgerritMerged opendev/system-config master: 404 periodic job : use executor only, add host key  https://review.opendev.org/70987401:31
*** dychen has joined #openstack-infra01:36
fungiclarkb: i've pushed up https://review.opendev.org/709927 to try to address remaining errors in the earlier zuul v3 conversion for that one job and also do the rest01:36
fungicurious to see if the laravel unit tests work01:37
*** dangtrinhnt has joined #openstack-infra01:38
*** michael-beaver has quit IRC01:38
*** dchen has quit IRC01:39
clarkbfungi: will be interesting to see if it is fine without the zuul legacy env vars01:42
fungiyup01:43
clarkbI've +2'dit assuming that is yhe case but dont necessarily expectit01:43
fungii'm watching the log stream for the unit test job and it's gotten fairly far into php unit testing, so i suspect it may01:43
fungiOK (135 tests, 1366 assertions)01:46
*** yamamoto has joined #openstack-infra01:47
openstackgerritIan Wienand proposed opendev/system-config master: 404 periodic job: fix host parameter  https://review.opendev.org/70992801:50
*** gagehugo has quit IRC01:54
*** dingyichen has joined #openstack-infra01:56
*** dychen has quit IRC01:59
openstackgerritMerged opendev/system-config master: OpenStackId v3.0.3 Deployment  https://review.opendev.org/70992602:05
*** ociuhandu has joined #openstack-infra02:06
*** yamamoto has quit IRC02:07
*** yamamoto has joined #openstack-infra02:10
*** ociuhandu has quit IRC02:11
*** gyee has quit IRC02:13
*** smarcet has left #openstack-infra02:16
*** ijw has quit IRC02:23
*** matt_kosut has joined #openstack-infra02:32
*** matt_kosut has quit IRC02:37
*** rlandy has quit IRC02:42
openstackgerritMerged opendev/system-config master: 404 periodic job: fix host parameter  https://review.opendev.org/70992803:01
*** ijw has joined #openstack-infra03:07
ianw"msg": "Data could not be sent to remote host \"static.opendev.org\". Make sure this host can be reached over ssh: Permission denied (publickey).\r\n"03:08
ianwclarkb: ^ progress ... i wonder if the per-project private key needs to be set in the connection explicitly?03:09
ianw"This key is added to the SSH agent for all jobs running in a post-review pipeline"03:11
openstackgerritMerged opendev/system-config master: static: provide git services  https://review.opendev.org/70940303:16
ianw2020-02-26 03:07:37,938 INFO zuul.ExecutorServer: [build: 30ce5ed328674de7bbb0b5b993bc9204] Added SSH Key opendev.org/opendev/system-config project key03:19
ianwwonder if it's my stuffup on the auth key03:20
*** rlandy has joined #openstack-infra03:21
*** rlandy has quit IRC03:22
ianwyes!  somehow it's got a quote in there03:23
fungiscore03:27
openstackgerritIan Wienand proposed opendev/system-config master: 404 periodic job: minor fixes  https://review.opendev.org/70994603:28
*** bdodd has joined #openstack-infra03:36
*** rh-jelabarre has quit IRC03:36
*** hamerins has joined #openstack-infra03:37
*** hamerins has quit IRC03:39
*** hamerins has joined #openstack-infra03:41
*** hamerins has quit IRC03:42
*** ijw has quit IRC03:42
*** hongbin has joined #openstack-infra03:49
*** dangtrinhnt has quit IRC03:55
*** dangtrinhnt has joined #openstack-infra03:56
*** dangtrinhnt has quit IRC04:01
openstackgerritMerged openstack/diskimage-builder master: Add CentOS 8 support  https://review.opendev.org/68430804:02
openstackgerritMerged openstack/diskimage-builder master: Do not include efibootmgr and efivars for ppc architectures  https://review.opendev.org/70981104:02
openstackgerritMerged openstack/diskimage-builder master: Change tgt pkg-map to target-restore CentOS/RHEL-8  https://review.opendev.org/70915904:05
openstackgerritMerged openstack/diskimage-builder master: fix iscsi-boot element exiting build even if dracut-regenerate used  https://review.opendev.org/70734004:05
*** dangtrinhnt has joined #openstack-infra04:07
openstackgerritMerged opendev/system-config master: 404 periodic job: minor fixes  https://review.opendev.org/70994604:22
*** factor has quit IRC04:31
*** factor has joined #openstack-infra04:31
*** hongbin has quit IRC04:39
*** imacdonn has quit IRC04:47
*** imacdonn has joined #openstack-infra04:47
ianwAJaeger/clarkb: ta-da http://zuul.openstack.org/build/c95c1358192347ecaf91fbcefe6358a8/console#1/1/1/static.opendev.org :)04:55
ianwfor sure the output could be better, save it as an artifact or whatever, or scrape more sites.  but it basically works04:55
ianwi'll switch the git sites dns to static.opendev.org in the morning, not going to have time to monitor it now05:03
ianwbut deployment looks good05:03
*** raukadah is now known as chandankumar05:09
*** ykarel|away is now known as ykarel05:13
*** tetsuro has quit IRC05:20
*** tetsuro has joined #openstack-infra05:22
*** gagehugo has joined #openstack-infra05:23
AJaegerianw: good data - but difficult to find05:31
AJaegerianw: I was looking at job-output.txt and could not find the data. Can we generate a separate file and show that, please?05:31
*** evrardjp has quit IRC05:34
*** evrardjp has joined #openstack-infra05:35
*** tetsuro has quit IRC05:39
openstackgerritMerged zuul/zuul-jobs master: install-javascript-packages: add tox_constraints_file  https://review.opendev.org/70941405:40
*** udesale has joined #openstack-infra05:41
*** udesale has quit IRC05:41
*** udesale has joined #openstack-infra05:41
*** ramishra has quit IRC05:42
*** ramishra has joined #openstack-infra05:50
*** larainema has joined #openstack-infra05:51
*** ramishra has quit IRC05:55
*** ramishra has joined #openstack-infra05:56
*** kozhukalov has joined #openstack-infra06:08
*** ociuhandu has joined #openstack-infra06:08
*** matt_kosut has joined #openstack-infra06:10
*** ociuhandu has quit IRC06:13
*** dangtrinhnt has quit IRC06:24
*** udesale has quit IRC06:24
*** udesale has joined #openstack-infra06:25
*** dangtrinhnt has joined #openstack-infra06:26
*** tetsuro has joined #openstack-infra06:31
*** roman_g has quit IRC06:38
*** lmiccini has joined #openstack-infra06:41
*** rcernin has quit IRC06:47
*** ociuhandu has joined #openstack-infra07:02
*** ociuhandu has quit IRC07:07
*** udesale has quit IRC07:12
*** udesale has joined #openstack-infra07:12
*** Lucas_Gray has joined #openstack-infra07:13
*** Lucas_Gray has quit IRC07:18
*** pgaxatte has joined #openstack-infra07:21
*** Lucas_Gray has joined #openstack-infra07:22
*** ociuhandu has joined #openstack-infra07:42
*** slaweq_ has joined #openstack-infra07:42
openstackgerritTobias Henkel proposed zuul/zuul master: Optimize canMerge using graphql  https://review.opendev.org/70983607:44
openstackgerritTobias Henkel proposed zuul/zuul master: Evaluate CODEOWNERS settings during canMerge check  https://review.opendev.org/64455707:44
*** slaweq_ is now known as slaweq07:45
*** Lucas_Gray has quit IRC07:46
*** Lucas_Gray has joined #openstack-infra07:48
*** ociuhandu has quit IRC07:48
*** dciabrin has joined #openstack-infra07:54
*** ykarel is now known as ykarel|lunch08:03
*** Lucas_Gray has quit IRC08:05
*** ociuhandu has joined #openstack-infra08:05
*** tesseract has joined #openstack-infra08:06
*** Lucas_Gray has joined #openstack-infra08:07
*** jcapitao has joined #openstack-infra08:11
*** Lucas_Gray has quit IRC08:11
*** ociuhandu has quit IRC08:11
*** dingyichen has quit IRC08:17
*** udesale has quit IRC08:18
*** tosky has joined #openstack-infra08:20
*** iurygregory has joined #openstack-infra08:21
*** rcernin has joined #openstack-infra08:22
*** Lucas_Gray has joined #openstack-infra08:27
*** amoralej|off is now known as amoralej08:31
*** udesale has joined #openstack-infra08:39
*** Lucas_Gray has quit IRC08:40
*** jpena|off is now known as jpena08:46
*** ralonsoh has joined #openstack-infra08:53
*** tkajinam has quit IRC08:57
*** lennyb has quit IRC09:06
*** lennyb has joined #openstack-infra09:07
*** ykarel|lunch is now known as ykarel09:08
*** ociuhandu has joined #openstack-infra09:08
*** dangtrinhnt has quit IRC09:14
*** lucasagomes has joined #openstack-infra09:15
*** dangtrinhnt has joined #openstack-infra09:16
*** dangtrinhnt has quit IRC09:17
*** dangtrinhnt has joined #openstack-infra09:17
*** xek_ has joined #openstack-infra09:19
*** ociuhandu has quit IRC09:22
*** psachin has joined #openstack-infra09:25
openstackgerritJan Kubovy proposed zuul/zuul master: Refactor `self.event_queues` in tests  https://review.opendev.org/70999009:26
*** Lucas_Gray has joined #openstack-infra09:28
*** tesseract has quit IRC09:35
*** tesseract has joined #openstack-infra09:36
*** smarcet has joined #openstack-infra09:40
*** smarcet has quit IRC09:40
*** ociuhandu has joined #openstack-infra09:42
openstackgerritFelix Edel proposed zuul/zuul master: Dequeue items via buildset uuid  https://review.opendev.org/70913510:05
*** pkopec has joined #openstack-infra10:07
*** ociuhandu has quit IRC10:11
*** roman_g has joined #openstack-infra10:15
*** dangtrinhnt has quit IRC10:18
*** dangtrinhnt has joined #openstack-infra10:19
*** ociuhandu has joined #openstack-infra10:21
*** dangtrinhnt has quit IRC10:24
*** ociuhandu has quit IRC10:31
*** Lucas_Gray has quit IRC10:48
*** Lucas_Gray has joined #openstack-infra10:54
*** ykarel is now known as ykarel|afk10:59
*** Lucas_Gray has quit IRC10:59
*** Lucas_Gray has joined #openstack-infra11:00
*** priteau has joined #openstack-infra11:01
*** ociuhandu has joined #openstack-infra11:07
*** tesseract has quit IRC11:08
*** tesseract has joined #openstack-infra11:11
*** ociuhandu has quit IRC11:12
evrardjpclarkb: FYI the votes were there, and the time has passed enough without negative votes, so I have pressed the green light button on  https://review.opendev.org/#/c/703134/ . Congrats!11:28
evrardjpgoodbye my friends!11:30
evrardjphaha11:30
*** ianychoi_ is now known as ianychoi11:32
*** jaosorior has joined #openstack-infra11:32
*** Lucas_Gray has quit IRC11:34
*** yamamoto has quit IRC11:49
*** ociuhandu has joined #openstack-infra11:51
*** ykarel|afk is now known as ykarel11:52
evrardjpwell11:53
evrardjpfun times ahead.11:53
*** ociuhandu has quit IRC11:55
* ttx learns how to put the cork back on the champagne bottle12:00
*** nicolasbock has joined #openstack-infra12:02
*** TristanSullivan has quit IRC12:03
*** dangtrinhnt has joined #openstack-infra12:06
*** smarcet has joined #openstack-infra12:07
*** sshnaidm is now known as sshnaidm|bbl12:09
*** yamamoto has joined #openstack-infra12:09
*** jcapitao is now known as jcapitao_lunch12:10
*** Lucas_Gray has joined #openstack-infra12:13
*** psachin has quit IRC12:25
*** ociuhandu has joined #openstack-infra12:30
*** udesale_ has joined #openstack-infra12:34
*** jpena is now known as jpena|lunch12:34
* frickler waves goodbye12:36
fricklerlikely we should all move over to #opendev , then? /me is still annoyed by all the duplicated gerritbot msgs all the time12:36
*** udesale has quit IRC12:36
*** dangtrinhnt has quit IRC12:38
*** dSrinivas has joined #openstack-infra12:38
*** Goneri has joined #openstack-infra12:38
*** dangtrinhnt has joined #openstack-infra12:40
*** ociuhandu has quit IRC12:40
mordredttx: you can put corks back? I thought the answer was just that you had a bottle to drink now ...12:46
AJaegerfrickler: put this on next week IRC meeting, I agree, the triple (in same cases) gerritbots are annoying and thus I'm staying away from #opendev12:50
*** dangtrinhnt has quit IRC12:50
AJaegerconfig-core, please review https://review.opendev.org/70980912:51
*** yamamoto has quit IRC12:51
*** dangtrinhnt has joined #openstack-infra12:52
*** dangtrinhnt has quit IRC12:55
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler's pause/resume functionality  https://review.opendev.org/70973512:59
*** rlandy has joined #openstack-infra13:00
fricklerAJaeger: good idea, done.13:04
*** rh-jelabarre has joined #openstack-infra13:04
fricklerttx: regarding xwiki, do I understand this correctly (after scanning some of xwiki.org/com), that the hosting offer comes from the xwiki company and not from the OSS organization? (not entirely sure about the governance details there)13:05
*** psachin has joined #openstack-infra13:05
*** ociuhandu has joined #openstack-infra13:06
fricklerI'm mainly concerned about privacy for our users, we make great efforts to not publish access logs for e.g. docs.o.o, but would give them into the hands of a commercial third-party for the wiki?13:06
ttxfrickler: yes the hosting comes from xwiki.com... it's a bit of a single-vendor project ("community" produces mainly plugins)13:08
*** smarcet has quit IRC13:10
ttxobviously third-party hosting comes with some trade-offs. Given that Xwiki-the-company is under French law, they have to abide to pretty drastic data collection/retention/communication laws13:10
fricklerttx: it also looks like an open-core project, they sell a non-open pro version with added features, right? that would IMO be another point against endorsing them with our presence13:11
ttxso personally I'm fine with the trade-off involved.13:11
ttxfrickler: yeah... it's not perfect. Their open core model is relatively clean (through their plugin system). But the alternatives are a lot worse13:12
ttxhttps://xwiki.com/en/company/libre-software/manifesto13:13
*** amoralej is now known as amoralej|lunch13:14
ttxfrickler: I'll make sure to raise those issues in the spec.13:14
*** jcapitao_lunch is now known as jcapitao13:17
*** smarcet has joined #openstack-infra13:21
openstackgerritJan Kubovy proposed zuul/zuul master: Scheduler's pause/resume functionality  https://review.opendev.org/70973513:22
openstackgerritJan Kubovy proposed zuul/zuul master: WIP: Store unparsed branch config in Zookeeper  https://review.opendev.org/70571613:25
*** jpena|lunch is now known as jpena13:26
*** Goneri has quit IRC13:28
*** smarcet has quit IRC13:31
*** Lucas_Gray has quit IRC13:34
openstackgerritTobias Henkel proposed zuul/zuul master: Refactor github auth handling into its own class  https://review.opendev.org/71003413:35
*** Lucas_Gray has joined #openstack-infra13:35
*** ykarel is now known as ykarel|afk13:36
*** nicolasbock has quit IRC13:40
*** nicolasbock has joined #openstack-infra13:40
*** Goneri has joined #openstack-infra13:42
*** matt_kosut has quit IRC13:44
*** dSrinivas has quit IRC13:44
*** matt_kos_ has joined #openstack-infra13:44
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests ensure-tox on all-platforms  https://review.opendev.org/70864213:53
*** jamesmcarthur has joined #openstack-infra13:53
openstackgerritJan Kubovy proposed zuul/zuul master: WIP: Store unparsed branch config in Zookeeper  https://review.opendev.org/70571613:54
*** amoralej|lunch is now known as amoralej13:59
*** Lucas_Gray has quit IRC13:59
*** Lucas_Gray has joined #openstack-infra14:00
*** ykarel|afk is now known as ykarel14:02
openstackgerritSorin Sbarnea proposed zuul/zuul-jobs master: Tests bindep role on all-platforms  https://review.opendev.org/70870414:02
*** slaweq has quit IRC14:05
*** Lucas_Gray has quit IRC14:05
*** Lucas_Gray has joined #openstack-infra14:07
*** slaweq has joined #openstack-infra14:09
fungifrickler: also i think it's the same concerns we'll have to tackle with the new translation system we were talking about using the hosted version of rather than running ourselves14:18
* fungi never can remember the name of that software14:19
*** yamamoto has joined #openstack-infra14:22
fricklerfungi: yes, though maybe that would affect only a smaller subgroup of users and thus could be evaluated differently14:24
*** jamesmcarthur has quit IRC14:27
*** jamesmcarthur has joined #openstack-infra14:30
*** jamesmcarthur has quit IRC14:32
*** ociuhandu has quit IRC14:37
*** yamamoto has quit IRC14:48
*** iurygregory has quit IRC14:49
*** yamamoto has joined #openstack-infra14:50
*** yamamoto has quit IRC14:55
*** sshnaidm|bbl is now known as sshnaidm14:56
*** psachin has quit IRC15:05
*** ykarel is now known as ykarel|afk15:06
*** yamamoto has joined #openstack-infra15:10
*** ociuhandu has joined #openstack-infra15:11
*** Lucas_Gray has quit IRC15:14
*** Lucas_Gray has joined #openstack-infra15:15
*** ociuhandu has quit IRC15:16
*** mugsie has quit IRC15:20
*** mugsie has joined #openstack-infra15:22
openstackgerritThierry Carrez proposed opendev/infra-specs master: Xwiki farm at wiki.opendev.org  https://review.opendev.org/71005715:27
*** Lucas_Gray has quit IRC15:32
otherwiseguyprometheanfire: question re: https://review.opendev.org/#/c/709737/ I see you +2+1'd, then removed, so now it is sitting at +2 verified w/ no other +2s. which is amusing. just curious as to why (neutron gate hits a bug fixed in this release relatively often)15:33
*** Lucas_Gray has joined #openstack-infra15:34
*** iurygregory has joined #openstack-infra15:34
*** ociuhandu has joined #openstack-infra15:41
fricklerotherwiseguy: you may want to ask this in #openstack-requirements15:42
*** ijw has joined #openstack-infra15:44
*** psachin has joined #openstack-infra15:46
openstackgerritSean McGinnis proposed openstack/project-config master: Use noop job for devstack-plugin-bdd  https://review.opendev.org/71006215:47
*** ijw has quit IRC15:48
otherwiseguyfrickler: will do. thx.15:49
openstackgerritSean McGinnis proposed openstack/openstack-zuul-jobs master: Remove legacy-tempest-dsvm-full-bdd job  https://review.opendev.org/71006315:50
*** psachin has quit IRC15:57
*** iurygregory has quit IRC16:05
smcginnisIf anyone has a moment to look at https://review.opendev.org/#/c/709809/ - that could help with requirements update patches for new lib releases.16:09
openstackgerritSean McGinnis proposed openstack/project-config master: Use noop job for devstack-plugin-bdd  https://review.opendev.org/71006216:12
*** pgaxatte has quit IRC16:13
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add publish job for stackviz  https://review.opendev.org/71007216:16
AJaegerconfig-core, could I get some help with the change above ^ is that all correct?16:16
*** smarcet has joined #openstack-infra16:17
*** eharney has quit IRC16:19
*** lmiccini has quit IRC16:21
*** udesale_ has quit IRC16:24
*** smarcet has quit IRC16:29
*** mattw4 has joined #openstack-infra16:33
openstackgerritMerged openstack/project-config master: Make update_constraints.sh aware of python_versions  https://review.opendev.org/70980916:35
*** jamesmcarthur has joined #openstack-infra16:36
*** psachin has joined #openstack-infra16:36
*** smarcet has joined #openstack-infra16:37
*** ijw has joined #openstack-infra16:38
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add publish job for stackviz  https://review.opendev.org/71007216:39
*** yamamoto has quit IRC16:39
*** xek__ has joined #openstack-infra16:48
*** tesseract has quit IRC16:50
*** xek_ has quit IRC16:51
*** gyee has joined #openstack-infra16:52
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add publish job for stackviz  https://review.opendev.org/71007216:52
*** eharney has joined #openstack-infra16:55
*** jaosorior has quit IRC16:57
*** ykarel|afk is now known as ykarel|away17:00
*** lucasagomes has quit IRC17:01
*** ociuhandu has quit IRC17:03
*** mattw4 has quit IRC17:03
*** mattw4 has joined #openstack-infra17:04
openstackgerritMerged zuul/zuul master: Don't set untouched refs of the repo state twice.  https://review.opendev.org/70785717:05
openstackgerritJames E. Blair proposed opendev/base-jobs master: Move pull-from-intermediate-registry to docker build job  https://review.opendev.org/71008917:10
corvusmordred: ^ i think this is approach is plausible.  the set of jobs i need to "fix" to implement this is pretty small.17:10
*** yamamoto has joined #openstack-infra17:11
*** psachin has quit IRC17:12
*** TristanSullivan has joined #openstack-infra17:14
corvusfungi: what's hard about running mediawiki?  are the obstacles there something that could be addressed by containerized deployment?17:15
corvuswas just browsing https://www.mediawiki.org/wiki/Docker17:16
*** yamamoto has quit IRC17:17
*** jcoufal has joined #openstack-infra17:18
fungimostly the dozens of plugins17:24
fungiand 20-step upgrade process17:24
fungiand things like providing keyword searching means running an elasticsearch service17:25
fungi(which needs to remain secured)17:25
corvusit looks like "plugins" is maybe not something that their existing work has solved yet, so probably that would mean we would need to make our own container images with those plugins.  however, that might be simpler in that we can just "splat" them in place in the image...17:26
fungiyeah, ultimately a lot of the work is in reverse-engineering the from-source deployment ryan set up years ago and working out how to modularize it all so that it doesn't depend on everything being splatted inside the mediawiki source tree17:27
mordredso a large portion of the issue might not be running mediawiki's in general as much as running our existing mediawiki17:28
corvuswell, i think maybe if we change our perspective a bit -- containers let us create a modular/repeatable deployment *with* everything being splatted into the source tree17:28
fungialso the configuration for it is nontrivial to manage. our current Settings.php is 228 lines *after* filtering out commas and blank lines17:28
mordredand it's _possible_ that we could learn that we could run X mediawikis easily if we started from scratch17:28
corvusso if that's the easiest way to do it, then maybe that's an approach to take17:28
mordred(I agree, reverse engineering a direct-installed thing is a nightmare)17:29
corvusthe 20-step upgrade process is worrisome -- but i wonder, is that something that needs to happen when you're upgrading something in-place, or, could you just shut down the old container, start up the new container, and have it automatically perform schema upgrades, etc?  or would there still be upgrade steps needed between different container versions17:29
fungithe other challenge is finding volunteers to go through all the edits being made every day by new users and reversing any spam which makes it through the various layers of spam filtering we've got in place, which at the moment is only being done by me i think17:30
corvusthat seems unlikely to be solved by containerization17:30
fungiperhaps i can be containerized17:30
*** ociuhandu has joined #openstack-infra17:30
corvusi feel certain there's a startup out there that would say otherwise though17:30
corvusdoes xwiki bring something new to the table wrt spam?17:31
fungiwell, i'm skeptical that any wiki solution which allows someone to make edits without being vetted and approved first is going to run into this17:31
mordredtheir developers have a matrix channel17:32
fungittx says it has spam mitigation features, but i haven't looked at them yet (and for the record mediawiki has spam mitigation features too, but also originates in a community where there are hundreds of service admins handling the volume so is a little more tolerant of solutions which require quick human response)17:32
*** mattw4 has quit IRC17:34
*** evrardjp has quit IRC17:34
*** evrardjp has joined #openstack-infra17:35
ttxre:spam... requiring an openstackID account is kind of a good prevention17:36
ttxbut I trust more the nestedpage concept17:36
ttxlike if you end up with strong authorization by default17:37
ttxrather than free-for-all by default...17:37
ttxI see it more as lightweight structured documentation site than a "wiki" really. But that may be my hate of wikis talking17:38
corvusoh, didn't know that was a consideration17:38
ttxcorvus: well it's up to each community really17:38
ttxbut for example I would not allow anyone to modify the home page, or add a page to the navigation index17:39
ttxs/anyone/everyone17:39
ttxwhich would reduce the spam incentive dramatically17:39
ttxsubwiki admins can easily create groups and add people to them17:39
ttxand then authZ propagates to nested pages17:40
*** gfidente is now known as gfidente|afk17:40
*** jpena is now known as jpena|off17:40
ttxbut yeah, I guess we'll never know how efficient spammers are against xwikis until we try :)17:41
*** smarcet has quit IRC17:41
ttx(one more reason I want to PoC it over a single subwiki first)17:41
fungimost of what drives the spam on wiki.openstack.org is that we allow search engines to index it, and people are trying to use the ability to post content there to poison search results in major search engines17:43
openstackgerritMerged zuul/zuul master: Don't fetch pull request twice for status event  https://review.opendev.org/70914917:43
fungialso note that to post content on wiki.openstack.org they have to first create an ubuntu one sso account so they can authenticate with its openid provider17:44
ttxfungi: ubuntuone has been a spam target for a loong time (see also: Lp spam)17:44
*** mattw4 has joined #openstack-infra17:44
ttxfungi: maybe we can limit indexing to "navigable" pages (pages manually added to teh navigation index by a subwiki admin)17:45
ttxif  you comment on the spec mentioning that, I can add it to the open questions17:45
fungiand we reduce the spamming by having a gigantic list of forbidden words which cannot appear in wiki edits, rejecting uploading of indexable text-oriented files (particularly pdf), and force anyone who hasn't made verified legitimate edits (as judged by a human moderator) go through a proprietary google recaptcha, and even then we still manually inspect their posts until we confirm they're posting17:46
fungilegitimate edits17:46
*** adriancz has quit IRC17:46
fungi(as far as what we're doing on wiki.o.o right now, i mean)17:46
fungiand then manually bulk rollback any spam edits they make17:47
fungiluckily the spam volume has been fairly low lately. i only end up blocking and reversing edits for maybe one or two accounts a week now17:48
fungioh, we also mostly block edits which include urls to external sites17:49
fungioh, the other tactic i love is that some of them seem to post whatever site/phone phishing scams then contact the osf claiming to be a victim of the scam and demanding that we reimburse them for all their losses. LOVE those17:50
fungibaleeted17:50
*** jamesmcarthur has quit IRC17:58
*** jamesmcarthur has joined #openstack-infra18:00
ttxhah lol18:00
openstackgerritJames E. Blair proposed opendev/system-config master: Use explicit provides/requires for container jobs  https://review.opendev.org/71010618:04
*** ociuhandu has quit IRC18:05
*** jamesmcarthur has quit IRC18:05
*** mattw4 has quit IRC18:05
*** ociuhandu has joined #openstack-infra18:05
mordredcorvus: those are seeming reasonable18:08
*** ociuhandu has quit IRC18:11
*** Goneri has quit IRC18:11
*** Goneri has joined #openstack-infra18:12
*** jbryce has joined #openstack-infra18:13
*** smarcet has joined #openstack-infra18:18
*** jamesmcarthur has joined #openstack-infra18:21
*** chandankumar is now known as raukadah18:21
*** yamamoto has joined #openstack-infra18:22
*** ijw has quit IRC18:27
*** michael-beaver has joined #openstack-infra18:29
*** priteau has quit IRC18:32
*** amoralej is now known as amoralej|off18:33
*** ramishra has quit IRC18:34
*** jcapitao is now known as jcapitao_off18:35
AJaegerfungi, storyboard has a release job legacy-puppet-storyboard-forge-upload - do we need this? It was never run in Zuul v3 according to http://zuul.opendev.org/t/openstack/builds?job_name=legacy-puppet-storyboard-forge-upload18:35
*** mattw4 has joined #openstack-infra18:36
*** igordc has joined #openstack-infra18:37
mordredAJaeger: nope18:37
mordredAJaeger: we don't do or need to do any uploading to puppetforge18:38
AJaegergreat, let me cleanup...18:38
fungiyeah, i think all openstack-infra and opendev projects with puppetforge upload jobs can have them cleaned up18:39
openstackgerritAndreas Jaeger proposed openstack/project-config master: Remove legacy-puppet-openstack-integration job  https://review.opendev.org/71011018:40
AJaegerfungi: ok, let me check for others...18:40
*** roman_g has quit IRC18:43
*** igordc has quit IRC18:43
openstackgerritAndreas Jaeger proposed openstack/project-config master: Remove puppet-forge upload jobs from opendev  https://review.opendev.org/71011018:45
AJaegerfungi, mordred, updated ^18:45
*** rlandy is now known as rlandy|mtg18:46
*** ociuhandu has joined #openstack-infra18:46
openstackgerritAndreas Jaeger proposed openstack/openstack-zuul-jobs master: Remove puppet-forge jobs  https://review.opendev.org/71011218:47
AJaegerand this is part two of the cleanup ^18:47
openstackgerritJames E. Blair proposed opendev/storyboard master: Use explicit provides/requires for container jobs  https://review.opendev.org/71011318:49
*** ociuhandu has quit IRC18:51
openstackgerritJames E. Blair proposed zuul/nodepool master: Use explicit provides/requires for container jobs  https://review.opendev.org/71011518:52
*** tosky has quit IRC18:56
*** Lucas_Gray has quit IRC18:57
openstackgerritJames E. Blair proposed zuul/zuul master: Use explicit provides/requires for container jobs  https://review.opendev.org/71011618:58
openstackgerritJames E. Blair proposed opendev/base-jobs master: Remove docker-image provides/requires  https://review.opendev.org/71011718:58
corvusokay that's the series -- there's some failing results i need to figure out18:58
corvusoh, er, it's maybe a legit image build failure19:01
*** dpawlik has quit IRC19:01
AJaegerfungi, could you review 710110 again, please? And please put https://review.opendev.org/709358 for elections on your review queue19:09
*** mattw4 has quit IRC19:09
*** mattw4 has joined #openstack-infra19:17
*** dpawlik has joined #openstack-infra19:18
fungiyou bet19:27
*** rlandy|mtg is now known as rlandy19:27
AJaegerthanks19:28
fungicorvus: mordred: i approved 710089 since it seems to work for the storyboard job, but i can unapprove if you want to wait until any of the other build failures are researched19:29
corvusfungi: sounds safe19:30
*** TristanSullivan has quit IRC19:31
fungicool, seemed so, just wanted to be sure19:31
*** jamesmcarthur has quit IRC19:31
*** yamamoto has quit IRC19:31
*** ociuhandu has joined #openstack-infra19:34
openstackgerritMerged opendev/base-jobs master: Move pull-from-intermediate-registry to docker build job  https://review.opendev.org/71008919:35
*** pkopec has quit IRC19:35
*** eharney has quit IRC19:38
*** jamesmcarthur has joined #openstack-infra19:40
*** ociuhandu has quit IRC19:40
openstackgerritMerged openstack/project-config master: Remove puppet-forge upload jobs from opendev  https://review.opendev.org/71011019:43
*** TristanSullivan has joined #openstack-infra19:49
*** eharney has joined #openstack-infra19:51
fungigonna go grab late lunch/early dinner but will be back as soon as i'm able19:56
*** jamesmcarthur has quit IRC19:58
openstackgerritsebastian marcet proposed opendev/system-config master: OpenStackId v3.0.4 Deployment  https://review.opendev.org/71012819:59
*** yamamoto has joined #openstack-infra20:02
*** dheemanth has joined #openstack-infra20:08
*** yamamoto has quit IRC20:08
*** ociuhandu has joined #openstack-infra20:08
*** sshnaidm is now known as sshnaidm|afk20:11
*** ociuhandu has quit IRC20:12
*** jcapitao_off has quit IRC20:17
AJaegerconfig-core, please review https://review.opendev.org/71007220:18
*** jamesmcarthur has joined #openstack-infra20:21
*** smarcet has quit IRC20:22
*** Lucas_Gray has joined #openstack-infra20:25
*** ociuhandu has joined #openstack-infra20:28
*** smarcet has joined #openstack-infra20:31
*** kozhukalov has quit IRC20:33
*** kozhukalov has joined #openstack-infra20:36
*** mattw4 has quit IRC20:42
*** mattw4 has joined #openstack-infra20:42
*** Lucas_Gray has quit IRC20:50
*** Lucas_Gray has joined #openstack-infra20:56
ianwsince everything seems quiet i plan to switch the git.<various> rax dns entires from https://review.opendev.org/#/c/709403/ soon to static.opendev.org20:59
*** jcoufal has quit IRC20:59
*** eharney has quit IRC21:00
*** larainema has quit IRC21:03
mordredianw: I support this decision21:06
openstackgerritMerged openstack/project-config master: Use noop job for devstack-plugin-bdd  https://review.opendev.org/71006221:08
ianwinteresting, every page in the rackspace ui seems to be giving"We're sorry, but there was an error loading the page.Please refresh the page or try again later. "21:09
ianwthe twitter is deprecated -> https://twitter.com/rackstatus?lang=en21:10
ianwand links to https://rackspace.service-now.com/system_status which fails to load with hsts failures in firefox21:10
ianwso, pretty much a typical morning :)21:11
mordredianw: the status reporting system needs a status reporting system21:15
ianw... ok rax is off the hook.  i dnf upgraded last evening, and it looks like firefox updated and must have messed itself up.  restarting my browser and things work21:15
mordredianw: awesome. I was just going to tell you the service now is green21:16
*** michael-beaver has quit IRC21:19
*** rcernin has quit IRC21:21
*** ralonsoh has quit IRC21:22
openstackgerritIan Wienand proposed opendev/zone-zuul-ci.org master: git.zuul-ci.org : point to static.opendev.org  https://review.opendev.org/71014221:23
*** Lucas_Gray has quit IRC21:23
*** bnemec has quit IRC21:23
corvusmordred: does this mean anything to you? https://zuul.opendev.org/t/openstack/build/e890ef8b4be24c71bc77a1c17ea4352d21:23
ianw#status log git.openstack.org git.starlingx.io and git.airshipit.org updated to be CNAME to static.opendev.org (https://review.opendev.org/#/c/709403/)21:24
openstackstatusianw: finished logging21:24
corvusModuleNotFoundError: No module named 'distutils.util' in get-pip.py21:24
ianwi'll double check but i think that's it for files02.openstack.org; it's now static.opendev.org and all ansible, all the time21:25
clarkbcorvus: that looks a lot like tge error I had on new status.o.o due to older setuptools21:25
clarkbhowever get-pip.py should bootstrap that itself I thought. Is an older setuptools present maybe?21:25
*** priteau has joined #openstack-infra21:28
*** Lucas_Gray has joined #openstack-infra21:28
*** kozhukalov has quit IRC21:29
mordredcorvus, clarkb: need python-distutils package21:31
mordredor, rather, python3-distutils - based on the other packages21:32
mordreddebian splits that into its own package even though it's part of core for reasons I cannot even come close to fathoming21:32
*** slaweq has quit IRC21:32
corvusmordred: i'm not trying to make a new job there or anything -- that's something that's an existing break?  i don't really understand what's going on21:35
*** adam_g has quit IRC21:36
*** jamesmcarthur has quit IRC21:36
mordredcorvus: ah - let me look deeper - might be21:36
*** ociuhandu has quit IRC21:36
mordredcorvus: AH yeah21:36
mordredcorvus: uh ...21:36
*** jamesmcarthur has joined #openstack-infra21:36
*** adam_g has joined #openstack-infra21:37
*** ociuhandu has joined #openstack-infra21:37
mordredcorvus: docker build /home/zuul/src/opendev.org/opendev/jeepyb21:37
mordredI need to dig21:37
mordredcorvus: I'm guessing this broke with pip the other day but we didnt' notice because we build that infrequently21:37
corvusmordred: oh wow i didn't notice that's the thing that broke21:38
mordredcorvus: we have to install jeepyb into gerrit-base because of the gerrit hook scripts21:38
openstackgerritMonty Taylor proposed opendev/system-config master: Use explicit provides/requires for container jobs  https://review.opendev.org/71010621:40
mordredcorvus: I'm 99% certain that'll fix it ^^21:40
mordredbecause this is the one place where we're not using the python base image and doing python things21:40
mordredcorvus: we could also just switch to using python3-pip package there instead of get-pip ... it really shouldn't matter21:41
*** ociuhandu has quit IRC21:41
*** jamesmcarthur has quit IRC21:44
*** jamesmcarthur has joined #openstack-infra21:45
mordredWOW - python3-pip pulls in a massive amount of packages21:45
corvusmordred: thanks!21:45
mordred  binutils build-essential cpp cpp-6 dpkg-dev fakeroot g++ g++-6 gcc gcc-6 libalgorithm-diff-perl libalgorithm-diff-xs-perl21:45
mordred  libalgorithm-merge-perl libasan3 libatomic1 libc-dev-bin libc6-dev libcc1-0 libcilkrts5 libdpkg-perl libexpat1 libexpat1-dev libfakeroot21:45
mordred  libfile-fcntllock-perl libgcc-6-dev libgomp1 libisl15 libitm1 liblocale-gettext-perl liblsan0 libmpc3 libmpfr4 libmpx2 libpython3-dev21:45
mordred  libpython3.5 libpython3.5-dev libquadmath0 libstdc++-6-dev libtsan0 libubsan0 linux-libc-dev make manpages manpages-dev patch21:45
mordred  python-pip-whl python3-dev python3-wheel python3-xdg python3.5-dev21:45
corvusmordred: you can pastebin :)21:46
mordredthat's JUST from python3-pip21:46
mordredsorry21:46
mordred:)21:46
corvusmordred: i'm guessing that's so you can compile stuff21:46
*** adam_g has quit IRC21:46
mordredyeah. except ... I mean ...21:46
mordredok. you install python and DON'T get python3-disutils - but you try to install pip and you get a whole c compile chain21:46
mordredeven if what you were going to pip install doesn't need that21:47
*** adam_g has joined #openstack-infra21:47
corvussure, but without that, "pip install foo" is a crapshoot21:47
mordredyup21:47
corvusif you install those things, then "pip install foo" is much more likely to work (though of course you may need further specific libraries)21:47
mordredtotally - but it's a pretty heavyweight choice to make those required and not suggested21:48
fungiianw: i wonder if the firefox name resolution default behavior change has resulted in an unanticipated denial of service against cloudflare's resolvers21:48
mordredespecially in light of things like breaking venv into its own package21:48
mordredcorvus: I may need to do another rev on that ...21:49
corvusk, all yours (i'm looking at other failures)21:49
fungimordred: yes, pip itself has grown quite the corral of dependencies which it normally vendors directly but which distros understandably don't want to maintain multiple copies of21:49
fungibut also a lot of those are "you might use pip to install an sdist which has c extensions it will want to compile, here have the autotools toolchain"21:50
*** ociuhandu has joined #openstack-infra21:50
mordredfungi: yeah - it's the second thing that bothers me21:52
mordredfungi: the first thing I totally agree with21:52
mordredfungi: the second thing should be recommends I'd think. although - let me try no-recommends... maybe I'm making a bunch of bad noise21:52
fungiright, i haven't looked but they're likely recommends not depends21:53
fungiapt just installs recommends by default now on debian and most of its derivatives21:53
mordredfungi: yah - and we disable that on our images - which is nice21:56
openstackgerritJames E. Blair proposed zuul/zuul master: Increase timeout in timeout test  https://review.opendev.org/71014621:56
fungiuntil you discover that folks in debianland have grown accustomed to pretty much all users installing recommends and slowly retool lots of packages to be basically useless without some of them21:57
mordredfungi: that's what bindep is for!21:58
*** jamesmcarthur has quit IRC21:59
*** jamesmcarthur has joined #openstack-infra22:00
*** jamesmcarthur has quit IRC22:01
*** ociuhandu has quit IRC22:02
*** ociuhandu has joined #openstack-infra22:02
openstackgerritMonty Taylor proposed opendev/system-config master: Use explicit provides/requires for container jobs  https://review.opendev.org/71010622:04
*** jamesmcarthur has joined #openstack-infra22:05
*** matt_kos_ has quit IRC22:06
mordredfungi: yup. I stand down from my complaining22:06
smcginnisHowdy. I noticed a doc publishing job failed because https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt now redirects to opendev.org instead of the full path to the new location for the file.22:06
*** ociuhandu has quit IRC22:07
smcginnisPretty sure this has been working well for quite a while, so a little odd. But this is an older rocky branch, so probably one of the smaller set of places that have not been updated to the correct opendev location.22:07
mordredianw: ^^22:07
mordredianw: something wrong with the new redirect perhaps?22:07
smcginnisIt's also the newer publish-tox-docs-releases job, so possible something isn't passed in right there?22:08
mordredsmcginnis: we just moved the apache serving the redirects to a new server22:08
smcginnisI thought it should get the upper constraints from a locally checked out requirements clone.22:08
smcginnisAh, so maybe that's it.22:08
mordredso it's completely conceivable that there is an actual problem that got missed22:08
smcginnisWe have had other releases go through fine, so maybe this is a first warning sign.22:08
mordredI agree with you on that redirect22:09
*** priteau has quit IRC22:11
smcginnisIn case it helps, here are the logs - https://3889a6aa6ea3f28e18b7-a85364018f10e4ce6159c46d9b375288.ssl.cf1.rackcdn.com/ad26a73c05c882f1f9e49832fd9eb3c4911da352/release-post/publish-tox-docs-releases/be174b3/job-output.txt22:11
*** rfolco has quit IRC22:12
*** tosky has joined #openstack-infra22:12
smcginnisOh, and sure enough, it was an early warning. Total of five jobs failed, all publish-tox-docs-releases.22:12
smcginnisAll green until about 20 minutes ago - https://zuul.opendev.org/t/openstack/builds?job_name=publish-tox-docs-releases22:13
mordredfungi: what do you think we should do? revert the DNS change? or try to debug without revert for a bit22:13
mordredsmcginnis: https://review.opendev.org/#/c/710142/ landed about 50 minutes ago - then had to do a cfg-mgmt pulse then a DNS refresh :)22:14
mordredsmcginnis: so that sounds about right22:14
smcginnisLooks pretty suspicious.22:15
mordredianw has been driving that - so he's really our man here22:15
ianwsorry back now, looking22:20
ianwcurl --resolve git.openstack.org:443:23.253.125.17 https://git.openstack.org/cgit/openstack/requirements/plain/upper-constraints.txt22:22
ianwi agree this returns a different result to the new server22:22
ianwi'll undo the change and investigate22:23
*** sshnaidm|afk has quit IRC22:23
ianwok, git.openstack.org CNAME is now returned to files.openstack.org22:24
*** jamesmcarthur has quit IRC22:29
*** jamesmcarthur has joined #openstack-infra22:30
*** Goneri has quit IRC22:30
fungiianw: can you summarize the behavior difference?22:31
*** eharney has joined #openstack-infra22:31
ianwfungi: http://paste.openstack.org/show/790047/22:32
ianwshould be matching https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/static/templates/git-redirects.conf.j2#L23 ?22:33
smcginnisThose results are consistent with what the job complained about.22:33
ianwsmcginnis: thanks for pointing it out ... the nice thing is we can fix it and now put in a test-case that runs against the redirector in our gate22:34
*** jamesmcarthur has quit IRC22:35
*** jamesmcarthur has joined #openstack-infra22:35
ianwfungi: this seems to be it's path through the regexes ... http://paste.openstack.org/show/790048/22:35
fungiianw: yeah, we must be failing to match on the right regex and falling through22:35
openstackgerritJames E. Blair proposed opendev/base-jobs master: Restore buildset-registry pre-run playbook  https://review.opendev.org/71015022:36
corvusfungi, mordred: ^ can you +3 this brown bag fix asap?22:36
smcginnisGlad it's a fairly easy fix.22:36
corvusfungi, mordred: actually, don't it has a typo22:37
*** ijw has joined #openstack-infra22:37
openstackgerritJames E. Blair proposed opendev/base-jobs master: Restore buildset-registry pre-run playbook  https://review.opendev.org/71015022:37
corvusfungi, mordred: there22:37
ianwsmcginnis: oh, we haven't actually fixed it yet :)  but when we do :)22:38
smcginnisNo, but it's been identified, and sometimes that's the most difficult part. ;)22:39
*** ociuhandu has joined #openstack-infra22:40
*** gagehugo has quit IRC22:41
ianwfungi: looks to me it should hit ... https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/static/templates/git-redirects.conf.j2#L8322:42
ianwapplying pattern '^cgit/(.*?)/(.*?)/plain/?(.*)' to uri '/cgit/openstack/requirements/plain/upper-constraints.txt'22:42
ianw... ohh, that' smissing a leading /22:43
ianwbut https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/static/templates/git-redirects.conf.j2#L84 isn't???22:43
*** ociuhandu has quit IRC22:45
ianwit's further down ... i think i got it https://opendev.org/opendev/system-config/src/branch/master/playbooks/roles/static/templates/git-redirects.conf.j2#L10622:46
*** rcernin has joined #openstack-infra22:49
*** jamesmcarthur has quit IRC22:49
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963922:50
openstackgerritIan Wienand proposed opendev/system-config master: static: fix git raw file redirect  https://review.opendev.org/71015122:50
*** rosmaita has quit IRC22:53
*** tkajinam has joined #openstack-infra22:53
*** jamesmcarthur has joined #openstack-infra22:54
corvusinfra-root: i'm going to self-approve https://review.opendev.org/710150 which is an emergency fix to image building jobs22:54
ianwfungi: to your prior comment, i think that firefox dnshttps thing only applied to people in the US?22:57
fungiianw: wow, one more reason for me to not want to trust it22:57
*** rosmaita has joined #openstack-infra22:58
fungicorvus: interestingly it wasn't exposed in child change 710113 until it hit the gate pipeline (if it's what i think i'm looking at)22:59
openstackgerritMerged opendev/base-jobs master: Restore buildset-registry pre-run playbook  https://review.opendev.org/71015023:01
corvusfungi: base-jobs is non-speculative; i think 710113 in gate ran after the problem change merged23:02
fungicorvus: yeah, i'm realizing that now23:02
fungifor some reason i didn't consider that when reviewing. lesson (hopefully finally) learned23:02
corvusi figured we could roll the dice on this without a duplicate job change since the set of affected projects is small (us + swift); i've already made my apologies to the swift folks23:03
corvusbut it's good to be reminded occasionally that if it's not tested it's broken23:03
*** smarcet has quit IRC23:05
fungii wonder if there are jobs in opendev/base-jobs whichwe shoud eventually split out into a separate untrusted repo23:06
fungigeez my typing is getting bad. must be evening23:07
corvusif there are, we should, but this isn't one of them (it needs to be trusted due to its interaction with the intermediate registry)23:07
fungiaha, right. got it23:07
fungisecrets23:08
corvusand some shenanigans on the executor23:08
corvussomething about socat :)23:08
fungioh, i had tried really hard to forget about that proxy23:08
* fungi sighs23:08
fungisomething something docker something23:09
openstackgerritJames E. Blair proposed zuul/zuul master: Store build.error_detail in SQL  https://review.opendev.org/70985723:11
*** jamesmcarthur has quit IRC23:15
*** bnemec has joined #openstack-infra23:18
*** rlandy is now known as rlandy|bbl23:18
*** admcleod has quit IRC23:19
openstackgerritIan Wienand proposed opendev/system-config master: Remove files02.openstack.org and related puppet  https://review.opendev.org/70963923:25
*** xek__ has quit IRC23:37
*** TristanSullivan has quit IRC23:44
*** dchen has joined #openstack-infra23:47
openstackgerritJames E. Blair proposed opendev/base-jobs master: Revert "Move pull-from-intermediate-registry to docker build job"  https://review.opendev.org/71015623:48
corvusfungi, mordred: ^ i'm going to self-approve that and try again tomorrow23:49
corvusi think the secret needs to move.  but i think at this point it's complex enough we should make a temporary second job23:49
*** dchen has joined #openstack-infra23:55
openstackgerritMerged opendev/base-jobs master: Revert "Move pull-from-intermediate-registry to docker build job"  https://review.opendev.org/71015623:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!