| *** hongbin has joined #openstack-requirements | 01:31 | |
| *** eandersson has quit IRC | 03:13 | |
| *** udesale has joined #openstack-requirements | 03:55 | |
| *** hongbin has quit IRC | 04:19 | |
| openstackgerrit | Merged openstack/requirements master: Add missing format arg for missing g-r reqs https://review.opendev.org/657037 | 04:24 |
|---|---|---|
| *** dims has quit IRC | 05:32 | |
| *** dims has joined #openstack-requirements | 05:33 | |
| *** udesale has quit IRC | 06:05 | |
| *** udesale has joined #openstack-requirements | 06:05 | |
| *** dims has quit IRC | 06:16 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/requirements master: Updated from generate-constraints https://review.opendev.org/657738 | 06:27 |
| *** dims has joined #openstack-requirements | 06:42 | |
| *** dims has quit IRC | 06:49 | |
| *** dims has joined #openstack-requirements | 06:54 | |
| *** udesale has quit IRC | 07:03 | |
| *** udesale has joined #openstack-requirements | 07:03 | |
| *** jpich has joined #openstack-requirements | 07:54 | |
| *** zbr|pto has quit IRC | 10:42 | |
| *** udesale has quit IRC | 11:14 | |
| *** jpich has quit IRC | 11:47 | |
| *** jpich has joined #openstack-requirements | 11:48 | |
| *** zbr has joined #openstack-requirements | 12:25 | |
| *** zbr has quit IRC | 12:26 | |
| *** samueldmq has joined #openstack-requirements | 13:09 | |
| *** davee__ has joined #openstack-requirements | 13:10 | |
| *** davee_ has quit IRC | 13:11 | |
| smcginnis | So what's the plan on the u-c redirects on master again? https://review.opendev.org/#/q/owner:tonybrad+status:open | 13:49 |
| prometheanfire | smcginnis: the open task here https://storyboard.openstack.org/#!/story/1719006 | 13:51 |
| prometheanfire | smcginnis: I don't know if we decided early or late switching, I think we all prefer early though | 13:51 |
| smcginnis | prometheanfire: Maybe we should suggest to that person that they get them all updated to the redirect URL since they are going through every repo. | 13:52 |
| prometheanfire | well, tony is the right person, but he's asleep | 13:53 |
| prometheanfire | and that link is for tonybrad, which I don't think is the same person :P | 13:53 |
| smcginnis | No, but hoping to head of the churn if they are going to be mucking in every repo and then we go back and change it again in a few days. | 13:54 |
| smcginnis | I guess we can leave it to tonyb[m] | 13:54 |
| prometheanfire | ah, ya | 13:55 |
| *** dangtrinhnt has quit IRC | 14:17 | |
| tonyb | smcginnis: The plan is to ask the community. We have 2 main options | 14:32 |
| tonyb | 1) master always points to master and we switch to the series name after branching ; or | 14:33 |
| tonyb | 2) at branch time we switch to the next series name on master | 14:33 |
| smcginnis | Don't we want both of those? | 14:34 |
| smcginnis | I guess the question is on the implemntation of 1. Do we want it to point to opendev.org/openstack/requirements master or the redirect URL to master. | 14:34 |
| tonyb | option 2 have benefits as we could land a semver: feature in the commit message to help packagers, but you said we were already doign that with the rno chnage so it's less apprealing | 14:34 |
| smcginnis | If it's the first, then the patches that person has up are good and we can approve them. | 14:34 |
| smcginnis | We do the semver: feature with the other stable branching. I definitely thing we should update that to use the new redirect URL for the stable branch too. | 14:35 |
| tonyb | tonybrad's patches are wrong as they're not using the static urls we created ... well at least the first one isn't I didn't check the others | 14:37 |
| tonyb | I'll make time to start the discussion on the mailing list | 14:38 |
| smcginnis | tonyb: OK, that was my main question. If the URLs he is using are not what we want, we should head those off and get him to use the status URLs. | 14:39 |
| smcginnis | *static | 14:39 |
| smcginnis | Rather than letting those go through, then come back a short while later just to update them again. | 14:39 |
| tonyb | smcginnis: Yup. I'll -1 them with a comment that "please wait, we'll get there" | 14:41 |
| smcginnis | ++ | 14:41 |
| prometheanfire | tonyb: thanks | 14:44 |
| tonyb | prometheanfire: np | 14:45 |
| tonyb | prometheanfire: for the recrd I'm in MA for the next couple of days | 14:45 |
| prometheanfire | tonyb: I forgot you are US time this week | 14:45 |
| prometheanfire | ya | 14:45 |
| * prometheanfire goes back to evaluating health insurance | 14:45 | |
| *** ccamacho has joined #openstack-requirements | 15:10 | |
| tonyb | prometheanfire: work has been pretty 'high focus' so I haven't been able to really do the community stuff that'd benefir from being in this TZ | 15:11 |
| *** altlogbot_2 has quit IRC | 15:21 | |
| tonyb | okay those have been reviewed, only one merged before we go to it so not too terrible | 15:21 |
| *** irclogbot_2 has quit IRC | 15:22 | |
| *** altlogbot_3 has joined #openstack-requirements | 15:22 | |
| *** irclogbot_0 has joined #openstack-requirements | 15:24 | |
| *** altlogbot_3 has quit IRC | 15:27 | |
| *** altlogbot_1 has joined #openstack-requirements | 15:28 | |
| *** irclogbot_0 has quit IRC | 15:28 | |
| *** irclogbot_0 has joined #openstack-requirements | 15:30 | |
| prometheanfire | jungleboyj: thanks for the email | 15:33 |
| jungleboyj | prometheanfire: ? | 15:35 |
| prometheanfire | for the cinder reqs one | 15:35 |
| jungleboyj | prometheanfire: Welcome. Sadly, don | 15:36 |
| jungleboyj | 't remember doing that but I believe you. :-) | 15:36 |
| jungleboyj | Are you talking about Python3 ? | 15:37 |
| prometheanfire | ya | 15:37 |
| jungleboyj | Ah, you are welcome. :-) | 15:37 |
| prometheanfire | tonyb dirk smcginnis: if you have time... https://review.opendev.org/657395 | 15:40 |
| prometheanfire | gonna bring that up at meeting time | 15:40 |
| smcginnis | Yeah, that's an annoying one. | 15:41 |
| smcginnis | Should we have him break it out into different patches so the ones that actually look OK can get through? | 15:41 |
| smcginnis | Some would be better than none. | 15:41 |
| prometheanfire | ya, there's an email on the list about cinder requirements py3 stuff (called out in review) | 15:42 |
| *** e0ne has joined #openstack-requirements | 15:50 | |
| *** e0ne has quit IRC | 15:53 | |
| tonyb | prometheanfire: when is meeting time? | 15:54 |
| * tonyb can't clock right now | 15:54 | |
| tonyb | dirk: I've commented on the oslo.rootwarp changes | 15:55 |
| tonyb | dirk: +1 to master, still a (now largley procedural) -1 on stable/* | 15:56 |
| prometheanfire | tonyb: 1530 central | 15:56 |
| prometheanfire | so 1630 for you, we could have it earlier since we are all in the US now | 15:56 |
| tonyb | prometheanfire: except dirk | 15:57 |
| prometheanfire | tonyb: earlier is better for him | 15:57 |
| prometheanfire | later better for you :P | 15:57 |
| tonyb | Let's just leave it where it is | 16:00 |
| tonyb | I'm just -1'ing a meeting invite that clashes | 16:00 |
| tonyb | I'd like to avoid to many moving parts | 16:00 |
| prometheanfire | k | 16:03 |
| *** e0ne has joined #openstack-requirements | 16:11 | |
| *** e0ne has quit IRC | 16:26 | |
| *** e0ne has joined #openstack-requirements | 17:10 | |
| *** e0ne has quit IRC | 17:12 | |
| *** e0ne has joined #openstack-requirements | 17:18 | |
| *** e0ne has quit IRC | 17:21 | |
| *** jpich has quit IRC | 17:35 | |
| *** e0ne has joined #openstack-requirements | 17:59 | |
| *** e0ne has quit IRC | 18:07 | |
| dirk | tonyb: you moved to the US? | 18:30 |
| tonyb | dirk: not yet, Just working from here for this week | 19:08 |
| prometheanfire | planned? | 19:09 |
| tonyb | prometheanfire: It's an open option at the moment | 19:09 |
| tonyb | prometheanfire: it's a big and expensive thing to move a family across the globe | 19:10 |
| prometheanfire | yep | 19:11 |
| dirk | Yeah | 19:18 |
| dirk | Do we have a patch for the keyring problem? | 19:22 |
| dirk | Looks like it became py3 only | 19:22 |
| dirk | Not exactly sure how we managed to get into that situation | 19:22 |
| prometheanfire | look at tornado, not sure that helps though | 19:25 |
| smcginnis | Seeing this happen more and more. Anyone know what's going on there? http://logs.openstack.org/34/647934/3/check/openstack-tox-py27/93180f1/job-output.txt.gz#_2019-05-08_16_59_54_544265 | 19:39 |
| smcginnis | We have caps in place for py2, but it still tries to pull in the py3 version. | 19:40 |
| prometheanfire | smcginnis: I think it's a bug, tornado does the same thing iirc | 19:41 |
| * smcginnis will be very happy when we can drop py2 | 19:42 | |
| prometheanfire | yep | 19:43 |
| tonyb | I can't explain *how* but it's like taskflow isn't getting installed in phase 1 | 19:55 |
| tonyb | That's a really puzzling issue | 19:56 |
| tonyb | smcginnis: is it just a tox -epy27 from current cinder master? | 19:56 |
| smcginnis | tonyb: Yeah, I've only seen it on py27. | 19:57 |
| smcginnis | Earlier in the log, it shows it gets the latest taskflow version that has the py version caps, but then later appears to pull in the wrong dependencies. | 19:57 |
| smcginnis | Guessing stable versions of taskflow will need to add those caps, as they just added it recently and it's only in the latest release. | 19:58 |
| smcginnis | Cinder should probably raise the lower constraint for taskflow to make sure the newest one is used too. | 19:58 |
| smcginnis | Maybe I'll try that and see if it makes any difference. | 19:58 |
| tonyb | I'll go through that log carefully we're clearly missing something | 20:00 |
| prometheanfire | meeting in 30 | 20:00 |
| tonyb | Ohhh the cinder toxenv looks wrong | 20:01 |
| tonyb | Yeah it's cinder bug | 20:02 |
| tonyb | funny it's taken that long to uncover | 20:02 |
| smcginnis | Really? What's wrong with it? | 20:03 |
| tonyb | smcginnis: you shall have to wait grasshopper while I wite the commit message ;P | 20:06 |
| smcginnis | :) | 20:06 |
| tonyb | smcginnis: https://review.opendev.org/657881 | 20:12 |
| *** ccamacho has quit IRC | 20:13 | |
| *** prometheanfire has quit IRC | 20:14 | |
| smcginnis | Thanks! | 20:15 |
| *** evrardjp has quit IRC | 20:15 | |
| *** evrardjp has joined #openstack-requirements | 20:16 | |
| *** prometheanfire has joined #openstack-requirements | 20:16 | |
| smcginnis | Really odd that that was never caught before. | 20:17 |
| tonyb | That is indeed odd | 20:24 |
| tonyb | I wonder if the move to opendev hasn't somehow altered the content of the mirrors? | 20:24 |
| prometheanfire | 5 min | 20:24 |
| tonyb | smcginnis: how long as it been blocked? just today? | 20:24 |
| tonyb | smcginnis: py27 passed zuul | 20:26 |
| smcginnis | tonyb: Yeah, just started noticing some failures today. And it's not every time, but seemed like it was increasing in frequency. | 20:27 |
| prometheanfire | mirror? | 20:27 |
| openstackgerrit | Dirk Mueller proposed openstack/requirements stable/stein: Add safety check output to the linters output https://review.opendev.org/657080 | 20:28 |
| tonyb | prometheanfire: bandersnacth or whatever it's called | 20:28 |
| openstackgerrit | Dirk Mueller proposed openstack/requirements stable/rocky: Add safety check output to the linters output https://review.opendev.org/657106 | 20:28 |
| tonyb | smcginnis: Well that's very strange I wonder if it's worth seeing if it's failing on a specific provider | 20:28 |
| smcginnis | I think they switched from bandersnatch to a reverse proxy cache thing. | 20:28 |
| prometheanfire | #startmeeting requirements | 20:30 |
| openstack | Meeting started Wed May 8 20:30:04 2019 UTC and is due to finish in 60 minutes. The chair is prometheanfire. Information about MeetBot at http://wiki.debian.org/MeetBot. | 20:30 |
| smcginnis | It is odd to me the log showed it picked up taskflow 3.4.0 earlier though. That version should have pulled in the right dependencies. | 20:30 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 20:30 |
| *** openstack changes topic to " (Meeting topic: requirements)" | 20:30 | |
| openstack | The meeting name has been set to 'requirements' | 20:30 |
| prometheanfire | #topic roll call | 20:30 |
| *** openstack changes topic to "roll call (Meeting topic: requirements)" | 20:30 | |
| smcginnis | o/ | 20:30 |
| prometheanfire | tonyb, prometheanfire, number80, dirk, coolsvap, toabctl, smcginnis, dhellmann ping | 20:30 |
| prometheanfire | o/ | 20:30 |
| dirk | o/ | 20:31 |
| prometheanfire | #topic Any controversies in the Queue? | 20:32 |
| *** openstack changes topic to "Any controversies in the Queue? (Meeting topic: requirements)" | 20:32 | |
| tonyb | \o | 20:33 |
| smcginnis | The Cinder driver one. | 20:33 |
| prometheanfire | requests | 20:33 |
| prometheanfire | and safety check in linters | 20:33 |
| prometheanfire | but that's it | 20:33 |
| prometheanfire | so, first, requests | 20:33 |
| prometheanfire | dirk: want to take that? | 20:33 |
| prometheanfire | or talk about it | 20:33 |
| * tonyb[m] lost connectivity to his normal IRC account | 20:34 | |
| prometheanfire | tonyb: k | 20:34 |
| dirk | prometheanfire: no updates yet, I started runnign the local tests today but then meeting madness started (not this meeting) | 20:35 |
| prometheanfire | of course, this meeting is insanity | 20:35 |
| tonyb[m] | insanely good! | 20:35 |
| prometheanfire | dirk: ok, please update with your results, you want to update to the new (unpublished) release as well? | 20:36 |
| prometheanfire | dirk: update the list that is | 20:36 |
| dirk | prometheanfire: yep | 20:36 |
| prometheanfire | cinder driver review, I think we are good here, dirk and tonyb asked them to split the review | 20:37 |
| dirk | I"m also trying to comment on funghi's topic | 20:37 |
| tonyb[m] | I do think that some of the 'problematic' ones will need more work so it might also be good to make the same split on the cinder side | 20:38 |
| dirk | it looks like both kolla and loci seem to be using "our" constraints | 20:38 |
| prometheanfire | dirk: ya, it is a point that's been brought up before | 20:38 |
| prometheanfire | tonyb: yep, they emailed the list statting they may have to do that | 20:38 |
| prometheanfire | dirk: osa uses them but can add exceptions | 20:38 |
| tonyb[m] | fungi's topic? | 20:38 |
| dirk | fungi left a comment questioning that we change uc on stable branches for security sake | 20:39 |
| prometheanfire | don't update constraints becaues then people will expect it | 20:39 |
| dirk | he is afraid that it is a road to regressions | 20:39 |
| prometheanfire | it in the list for the requests update thread | 20:39 |
| fungi | yep | 20:40 |
| fungi | that's a reasonable summary | 20:40 |
| prometheanfire | ok, safety check in linters | 20:41 |
| tonyb[m] | Oh right I follow nwow | 20:41 |
| tonyb[m] | now even | 20:41 |
| prometheanfire | for this one I know it runs fast but I don't like conflating lint checks and safety type checks in one 'yes/no' | 20:42 |
| prometheanfire | right meow? | 20:42 |
| tonyb[m] | I think that's fine | 20:42 |
| dirk | prometheanfire: its the same like other projects they run pep8/flake8 and bandit in the same job | 20:42 |
| fungi | if you need to update requests to a new release to avoid a security flaw in it, you may in turn need to update to a newer urllib3 and that may in turn require newer... on down until you hit something which needs updating in one of our projects to support | 20:43 |
| dirk | prometheanfire: technically the tox -epep8 should be renamed to tox -elinters imho | 20:43 |
| prometheanfire | that's true, and goodenough for me, if we need to split later on we can | 20:43 |
| tonyb[m] | I know just beacuse others do it isn't a good reason, but plenty of other places do linting a checking at the same time | 20:43 |
| prometheanfire | dirk: that's true too | 20:43 |
| prometheanfire | fungi: yep | 20:43 |
| dirk | prometheanfire: therewas a plan to rename pep8 to linters but it seems with zuulv3 this is now super painful *as you have to land a change in 1 billion repos | 20:43 |
| prometheanfire | lol | 20:43 |
| fungi | or super easy to just change in your repo and ignore everyone else? ;) | 20:44 |
| prometheanfire | ok, any other controversies? | 20:44 |
| dirk | fungi: I agree, requests is annoying (also that it is branchless and doesn't maintain older versions with security fixes) | 20:44 |
| fungi | i doubt it's the only one of our ~600 constraints entries which has those characteristics | 20:44 |
| tonyb[m] | fungi: true | 20:44 |
| dirk | fungi: I ran the saftey security checker against stable/pike the list is not short but its just a few packages | 20:45 |
| dirk | fungi: all the *good ones* of course (pycrytpo, cryptography, django, requests, ...) | 20:45 |
| fungi | also by the time security "fixes" percolate through our backporting of constraints bumps, deployers will have already needed to solve this on their side (or else they don't actually care about the security of their deployments, really) | 20:45 |
| prometheanfire | fungi: it's the latter | 20:46 |
| fungi | if you're using a deployment based on distro packages of dependencies, your distro has probably already pushed out fixed packages before we even know there's a vulnerability | 20:46 |
| prometheanfire | #topic open floor | 20:46 |
| *** openstack changes topic to "open floor (Meeting topic: requirements)" | 20:46 | |
| prometheanfire | ya, if using disto packages | 20:46 |
| dirk | fungi: all the container deployers that opensetack offers (kolla, loci, osa) seem to just use upperconstraints | 20:47 |
| dirk | fungi: building binary wheels from that | 20:47 |
| fungi | that's frightening | 20:47 |
| dirk | fungi: it is | 20:47 |
| dirk | to talk about something more fun | 20:47 |
| dirk | given that there are a thousand "switch to opendev.org url" reviews out there, we need to accellerate our efforts to push out *sane* upper-constraint urls | 20:48 |
| tonyb[m] | Sure | 20:48 |
| dirk | I have seen two to three variants, depending on who did the review. also some reviews that point to 404 urls (whcih pip in -c seems to happily ignore and just install unconstrained) | 20:48 |
| dirk | so I think I pushed a review to add TOX_CONSTRAINTS | 20:49 |
| prometheanfire | dirk: they do, but if the security check was gated on in them they could do that | 20:49 |
| dirk | but I can't find it anymore | 20:49 |
| tonyb[m] | :( | 20:49 |
| tonyb[m] | I think we shoudl just do it and ask for forgiveness for not doing everything in one hit | 20:50 |
| dirk | prometheanfire: right, but isn't it better to maintain that list in one place than having 3 different deployers compete in the combination of broken dependency versions they choose | 20:50 |
| dirk | what we could do is separate it out into unsafe-but-working-constraints.txt and safe-but-potentially-broken-constraints.txt | 20:50 |
| tonyb[m] | I feel like it's basically a 5-line shell script maybe 10 if I handle errors | 20:50 |
| dirk | then people can chose if they want stability or safety ;-] | 20:51 |
| prometheanfire | dirk: that's true, but also makes security 'our problem' rather than each deployment project's problem | 20:51 |
| dirk | prometheanfire: one thing I want to do is to switch to a pure-ascii output in the safety check | 20:51 |
| dirk | as it doesn't render too well from logs.o.org (it looked great when run locally) | 20:51 |
| prometheanfire | ya | 20:52 |
| dirk | prometheanfire: our problem is to review, not to fix stuff | 20:52 |
| prometheanfire | tonyb: so you are accelerating the TOX_CONSTRAINTS thing? | 20:52 |
| dirk | and I can take the reviews | 20:52 |
| tonyb[m] | prometheanfire: I don't have the bandwith for that work right now | 20:52 |
| prometheanfire | dirk: true, but that's a bit reductionist :P | 20:52 |
| tonyb[m] | prometheanfire: I can to the 'switch to https://releases.o.o/...' work on at least master and probably stable/* | 20:53 |
| tonyb[m] | prometheanfire: I doubt I'll have time to fix all the bitrot but I can start the process | 20:53 |
| prometheanfire | tonyb[m]: that'd be a good start and head off a bunch of the reviews | 20:53 |
| tonyb[m] | Yup | 20:54 |
| tonyb[m] | at least a few bad ones have merged | 20:54 |
| prometheanfire | yep | 20:54 |
| prometheanfire | anyone else have topics? | 20:54 |
| smcginnis | not me | 20:54 |
| dirk | tonyb: https://review.opendev.org/657886 would be the first step I think | 20:56 |
| prometheanfire | #endmeeting | 20:56 |
| *** openstack changes topic to "OpenStack Requirements - IRC meetngs on Wednesdays @ 07:00 UTC in here in #openstack-requirements - See agenda @ http://tinyurl.com/h44ryuw - IRC channel is *LOGGED* @ http://tinyurl.com/j38rk24" | 20:56 | |
| openstack | Meeting ended Wed May 8 20:56:05 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:56 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/requirements/2019/requirements.2019-05-08-20.30.html | 20:56 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/requirements/2019/requirements.2019-05-08-20.30.txt | 20:56 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/requirements/2019/requirements.2019-05-08-20.30.log.html | 20:56 |
| openstackgerrit | Dirk Mueller proposed openstack/requirements master: Add safety check output to the linters output https://review.opendev.org/657105 | 21:04 |
| tonyb | dirk: Can you point me at the 'keyring' issue? | 21:08 |
| dirk | tonyb: http://logs.openstack.org/67/657167/2/check/requirements-integration/9d52644/job-output.txt.gz#_2019-05-08_11_08_25_535905 | 21:10 |
| dirk | tonyb: it seems in other cases it fails on networkx | 21:10 |
| dirk | whats going on? | 21:11 |
| tonyb | well with a 30second look it seems similar to the cinder fix for networkx | 21:11 |
| tonyb | Well for keyring I think g-r is wrong | 21:14 |
| dirk | Right but there wasn't a release recently so that should be a problem since forever | 21:17 |
| tonyb | dirk: Yeah clearly something *else* has also changed | 21:17 |
| tonyb | dirk: I'm going to play wack-a-mole with keyring as we're in the wrong but it's worth stepping back and workign out what chnaged. | 21:18 |
| openstackgerrit | Tony Breeds proposed openstack/requirements master: Cap keyring on python2 https://review.opendev.org/657890 | 21:24 |
| dirk | tonyb: left a NIT | 21:29 |
| tonyb | dirk: ok | 21:31 |
| openstackgerrit | Tony Breeds proposed openstack/requirements master: Cap keyring on python2 https://review.opendev.org/657890 | 21:35 |
| tonyb | dirk: fixed | 21:36 |
| *** e0ne has joined #openstack-requirements | 23:35 | |
| *** e0ne has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!