Thursday, 2020-03-19

*** tosky has quit IRC00:50
*** brinzhang has joined #openstack-requirements00:52
*** brinzhang has quit IRC00:57
*** brinzhang has joined #openstack-requirements00:57
*** brinzhang_ has joined #openstack-requirements01:20
*** brinzhang has quit IRC01:23
*** vishalmanchanda has joined #openstack-requirements01:33
*** udesale has joined #openstack-requirements04:32
*** evrardjp has quit IRC05:36
*** evrardjp has joined #openstack-requirements05:36
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: Updated from generate-constraints  https://review.opendev.org/71357306:48
openstackgerritMatthew Thode proposed openstack/requirements master: Updated from generate-constraints  https://review.opendev.org/71357307:20
*** mwhahaha has quit IRC08:09
*** mwhahaha has joined #openstack-requirements08:10
*** rpittau|afk is now known as rpittau08:11
*** e0ne has joined #openstack-requirements08:16
*** tosky has joined #openstack-requirements08:21
*** ralonsoh has joined #openstack-requirements08:53
*** yoctozepto has quit IRC09:07
*** yoctozepto0 has joined #openstack-requirements09:16
*** yoctozepto9 has joined #openstack-requirements09:27
*** yoctozepto0 has quit IRC09:27
*** e0ne has quit IRC09:36
*** e0ne has joined #openstack-requirements09:36
*** dtantsur|afk is now known as dtantsur09:39
*** vishalmanchanda has quit IRC10:03
openstackgerritOpenStack Proposal Bot proposed openstack/requirements stable/stein: update constraint for keystoneauth1 to new release 3.13.2  https://review.opendev.org/71381810:20
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for oslo.service to new release 2.1.0  https://review.opendev.org/71381910:21
*** vishalmanchanda has joined #openstack-requirements10:22
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for taskflow to new release 4.1.0  https://review.opendev.org/71382010:22
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for oslo.vmware to new release 3.2.1  https://review.opendev.org/71382110:23
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for tooz to new release 2.2.0  https://review.opendev.org/71382210:23
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for oslo.policy to new release 3.0.1  https://review.opendev.org/71382310:26
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for oslo.log to new release 4.1.0  https://review.opendev.org/71382410:26
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for oslo.versionedobjects to new release 2.0.1  https://review.opendev.org/71382510:27
*** yoctozepto9 is now known as yoctozepto10:37
*** hberaud has quit IRC11:19
*** dtantsur is now known as dtantsur|afk11:20
*** rpittau is now known as rpittau|bbl11:30
*** ccamacho has quit IRC11:38
*** ccamacho has joined #openstack-requirements11:44
*** udesale_ has joined #openstack-requirements12:19
*** udesale has quit IRC12:20
*** e0ne_ has joined #openstack-requirements12:20
*** e0ne has quit IRC12:21
openstackgerritOpenStack Proposal Bot proposed openstack/requirements stable/rocky: update constraint for python-glanceclient to new release 2.13.2  https://review.opendev.org/71386612:40
*** hberaud has joined #openstack-requirements12:41
openstackgerritOpenStack Proposal Bot proposed openstack/requirements stable/rocky: update constraint for glance_store to new release 0.26.2  https://review.opendev.org/71386812:45
*** rpittau|bbl is now known as rpittau12:59
*** udesale_ has quit IRC14:00
rm_workprometheanfire: I don't understand your comment on https://review.opendev.org/#/c/712187/ ?14:42
prometheanfirerm_work: if there is a known bad release it should be masked in global-requirements15:18
prometheanfireoh, wrong review15:20
prometheanfirerm_work: still -1 but because rocky is ancient (thought it was master it seems)15:21
rm_workerr so it wasn't a bad release :D15:21
rm_workbut it is now, lol15:21
rm_workreally no idea how to resolve this15:22
rm_workinfra said talk to requirements...15:22
rm_workbut i don't know if this is fixable here15:22
rm_workwe can't pin setuptools15:22
rm_workand we can't bump a package in U-C rocky?15:22
prometheanfireya, that's an infra thing, go to there channel?15:22
rm_workwhich means our gates are essentially broken with no fix possible15:22
prometheanfirean exception can probably be made for this15:22
rm_workhmm k15:23
prometheanfirebut generally setuptools is managed by infra15:23
rm_workyeah this affects a few projects I think15:23
rm_workthey said it's not likely feasible to pin that, I think15:23
rm_workI will ask again tho...15:23
prometheanfireonly airship and a couple of x/PROJECTNAMEs15:23
prometheanfireya15:23
prometheanfiregiven that rocky is ancient at this point I can see there reluctance15:24
smcginnisprometheanfire: Rocky hasn't completely switched over to extended maintenance yet.15:27
smcginnisSo we could still make a change like this I guess. Though only an exceptional case that we wouldn't want to normally do.15:28
smcginnisThat said, risky changing requirements now that most projects have already transitioned to EM.15:29
smcginnisBut yeah.15:29
prometheanfiresmcginnis: ya, there are not many good options :|15:29
rm_workWell, it's looking like either we land this change in stable/rocky requirements, or... We drop support and stop running tests on rocky15:35
rm_workOR I guess we could just ... kill the requirements testing, and bump our own local lower-constraint15:35
prometheanfirelol15:37
prometheanfireI did change my vote to +215:38
smcginnisYeah, that seems like the least bad path at this point.15:38
smcginnisWe should know soon enough.15:39
prometheanfiresoon?15:40
rm_worksoooooon15:40
rm_worki mean, if ya'll want to be real assholes and push back super hard, I guess I can *reluctantly* have no choice but to drop queens/rocky maintenance :D15:41
rm_workso, you know... totally up to ya'll ^_^15:41
smcginnisHah15:42
*** vishalmanchanda has quit IRC15:43
prometheanfirehehehe15:43
rm_workhmm, probably shouldn't have said that in a logged channel tho ;)15:43
*** evrardjp has quit IRC17:36
*** evrardjp has joined #openstack-requirements17:36
*** rpittau is now known as rpittau|afk18:06
openstackgerritSorin Sbarnea proposed openstack/requirements master: Bump virtualenv===20.0.12  https://review.opendev.org/71396318:53
openstackgerritMerged openstack/requirements stable/rocky: Bump MarkupSafe to 1.1.1 due to setuptools change  https://review.opendev.org/71218719:34
openstackgerritMerged openstack/requirements stable/stein: update constraint for keystoneauth1 to new release 3.13.2  https://review.opendev.org/71381819:34
openstackgerritMerged openstack/requirements master: update constraint for tooz to new release 2.2.0  https://review.opendev.org/71382219:36
openstackgerritMerged openstack/requirements master: update constraint for oslo.log to new release 4.1.0  https://review.opendev.org/71382419:40
openstackgerritMatthew Thode proposed openstack/requirements master: Updated from generate-constraints  https://review.opendev.org/71357320:10
openstackgerritMerged openstack/requirements master: update constraint for oslo.versionedobjects to new release 2.0.1  https://review.opendev.org/71382520:14
*** ralonsoh has quit IRC20:19
openstackgerritMerged openstack/requirements stable/rocky: update constraint for python-glanceclient to new release 2.13.2  https://review.opendev.org/71386620:28
*** e0ne_ has quit IRC21:04
*** e0ne has joined #openstack-requirements21:08
*** e0ne has quit IRC21:22
openstackgerritOpenStack Proposal Bot proposed openstack/requirements master: update constraint for tripleo-common to new release 12.2.0  https://review.opendev.org/71399722:01
openstackgerritMerged openstack/requirements master: update constraint for taskflow to new release 4.1.0  https://review.opendev.org/71382022:10
*** zigo has quit IRC22:22
*** zigo has joined #openstack-requirements22:32
fungirm_work: prometheanfire: it's not so much that the infra team controls whether or not setuptools is pinned, it's that the python packaging ecosystem is designed not to really give you a means to do that. there's no way (with traditional python packaging) for package installation to have any control over what version of setuptools is used because setuptools is assumed to already be present and22:52
fungitools like virtualenv are just going to give you whatever the latest setuptools is22:52
rm_workyeah, sorry didn't mean to imply it was a malicious choice to not support that or something, lol22:53
rm_workjust that infra would/could not22:53
fungiso basically anywhere we pin to dependencies which don't work with latest setuptools, we're in essence declaring bankruptcy on being able to use traditional python packaging22:53
fungithe very bleeding edge latest release of virtualenv added a feature to be able to say what "seed packages" should be included when creating a virtualenv, so it might be possible to leverage that to ask it to use an older setuptools. that said, i don't know how you'd go about orchestrating virtualenv options from tox. our job entry point there is a layer removed from virtualenv22:55
fungii think you could maybe do it by precreating the virtualenv and then telling tox to use that and not make one of its own22:56
fungibut that starts to get fragile if you expect developers and users to mimic the same pattern on their systems22:57
rm_workyeah22:57
rm_worki believe this bump was the correct option22:57
fungithat workaround would be more or less the same as creating the virtualenv, using pip to downgrade setuptools in it, then telling tox to use that22:58
prometheanfirefungi: ya, looks like we bundle one with our python installs22:59
prometheanfire/usr/lib64/python3.6/ensurepip/_bundled/setuptools-40.6.2-py2.py3-none-any.whl22:59
fungibut also dropping jobs and/or deviating from global upper-constraints.txt are in the cards where extended maintenance branches are concerned. this is a prime example of why it's hard to maintain serious support for stable branches in our ecosystem long-term22:59
fungiprometheanfire: i don't think virtualenv eve uses that23:00
rm_workyeah, but to deviate from u-c requires just dropping the requirements job, right?23:00
fungirm_work: and possibly forking the constraints list into your repo23:00
prometheanfirefungi: I'm talking about the python package itself23:00
prometheanfirefor gentoo23:01
rm_workah, yes23:01
prometheanfireI'm surprised we bundle at all23:01
* prometheanfire may go make a bug about it just to see what happens23:01
fungiprometheanfire: that's typical of all python except on debian derivatives where they separate it into a different package23:01
fungiprometheanfire: it's used by the venv module23:01
prometheanfirewe have a setuptools package though23:01
fungiright, i mean debian actually builds a separate python3-venv package which separates the venv module so that they can build the embedded setuptools et cetera copies from other source packages in the archive rather than using the copies provided by upstream python interpreter build process23:02
prometheanfireah23:02
fungiso that the version of setuptools provided with the python3-venv package is the same version of setuptools provided in theor python3-setuptools package23:03
fungiand gets the same security fixes backported and so on23:03
prometheanfirewe just rebuild all of python :D23:04
fungiit what they do so they won't need to manage security patches for more than one version of setuptools in the archive23:04
fungiand it's convenient insofar as you at least don't need to install python3-pip and python3-setuptools packages to get python3-venv to work, so pip and setuptools don't clutter up your system-wide import path23:06
fungiand python3-wheel and so on23:06
prometheanfireisn't venv a builtin for 3 anyway?23:07
prometheanfire/usr/lib64/python3.6/venv/__init__.py23:08
fungiit's in the stdlib, but debian notoriously breaks venv and ensurepip out of the stdlib collection, along with a few other things that have some onerous build dependencies23:08
fungithey also package the bulk of stdlib separate from the interpreter23:09
prometheanfiredon't be debian, gotit :P23:10
fungiso python3-minimal just gets you the interpreter and builtins, and python-3 is a "virtual" package depending on that and libpython3-stdlib23:10
fungis/python-3/python3/23:10
fungiwell, they have good reasons for why they're doing it that way, but yes it's an unpopular choice with a lot of users and upstream developers alike23:10
prometheanfireto do a lot of other things right (deterministic builds)23:11
fungiwell, and for ease of portability to other platforms which may not be able to satisfy all the build dependencies, and to reduce workload on the security team, and so on23:12

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!