Wednesday, 2014-11-19

*** chlong has quit IRC00:01
*** david-lyle is now known as david-lyle_afk00:06
*** zz_avozza is now known as avozza00:07
*** gfidente has quit IRC00:14
*** chlong has joined #tripleo00:16
*** vinsh has quit IRC00:18
*** avozza is now known as zz_avozza00:20
*** yamahata has joined #tripleo00:30
*** tzumainn has joined #tripleo00:32
*** tserong has joined #tripleo00:32
*** yamahata has quit IRC00:36
*** yamahata has joined #tripleo00:36
*** lucas-dinner has quit IRC00:39
*** pradeep has joined #tripleo00:40
*** pradeep1 has quit IRC00:43
openstackgerritSteve Kowalik proposed openstack/tripleo-incubator: Add public VLAN support.  https://review.openstack.org/10375700:58
openstackgerritMerged openstack/os-collect-config: Updated from global requirements  https://review.openstack.org/13477700:59
openstackgerritMerged openstack/os-cloud-config: Updated from global requirements  https://review.openstack.org/13477601:00
*** liuxx has joined #tripleo01:15
*** ccrouch has joined #tripleo01:15
*** Marga_ has joined #tripleo01:17
*** pradeep1 has joined #tripleo01:36
*** pradeep has quit IRC01:38
*** ChuckC has quit IRC01:43
*** pradeep has joined #tripleo01:49
openstackgerritDaneyon Hansen proposed stackforge/kolla: Adds Neutron Networking Support  https://review.openstack.org/13506001:51
*** pradeep1 has quit IRC01:52
*** pradeep1 has joined #tripleo01:53
*** pradeep has quit IRC01:54
*** pradeep has joined #tripleo02:01
*** zz_avozza is now known as avozza02:01
*** nosnos has joined #tripleo02:02
*** pradeep1 has quit IRC02:03
*** pradeep1 has joined #tripleo02:03
*** liuxx has quit IRC02:05
*** liuxx has joined #tripleo02:05
*** pradeep has quit IRC02:05
*** pradeep has joined #tripleo02:07
*** pradeep1 has quit IRC02:08
*** pradeep1 has joined #tripleo02:10
*** avozza is now known as zz_avozza02:11
*** pradeep has quit IRC02:11
*** jerryz has joined #tripleo02:15
*** pradeep has joined #tripleo02:16
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Fixed: Remove o-c-c step from controller/Mgmt  https://review.openstack.org/13175702:17
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Add troubleshooting note for SSH  https://review.openstack.org/13175602:17
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Partial Fix - Give o-c-c children time to exit  https://review.openstack.org/13175802:17
*** pradeep1 has quit IRC02:19
*** pradeep1 has joined #tripleo02:23
*** pradeep has quit IRC02:24
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Fix to ensure MySQL command line works  https://review.openstack.org/13175902:25
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Call reset-db instead of sync-db  https://review.openstack.org/13481702:25
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Recovery information should rebuild not occur  https://review.openstack.org/13481802:25
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Attempt to ensure services are stopped  https://review.openstack.org/13176002:25
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Setting an ansible.cfg file  https://review.openstack.org/13176102:25
*** pradeep has joined #tripleo02:26
*** pradeep1 has quit IRC02:28
*** pradeep1 has joined #tripleo02:35
*** pradeep has quit IRC02:37
*** ChuckC has joined #tripleo02:39
*** pradeep has joined #tripleo02:42
*** Marga_ has quit IRC02:43
*** pradeep1 has quit IRC02:43
openstackgerritSteve Kowalik proposed openstack/os-cloud-config: Add support for creating Keystone v3 clients  https://review.openstack.org/13388502:47
*** tzumainn has quit IRC02:48
openstackgerritSteve Kowalik proposed openstack/os-cloud-config: Add support to create a Keystone domain for Heat  https://review.openstack.org/13485802:49
*** pradeep1 has joined #tripleo02:50
*** pradeep has quit IRC02:50
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Addition of a nova power controlling module  https://review.openstack.org/13483202:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Add options to group_vars to make it match docs  https://review.openstack.org/13483302:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Start keepalived/haproxy outside of o-r-c  https://review.openstack.org/13482102:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Unblock startup of RabbitMQ during upgrade  https://review.openstack.org/13482002:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Add documentation assist users with resumption  https://review.openstack.org/13482302:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Wait for long running MySQL sync processes  https://review.openstack.org/13482202:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Change controller startup to force o-c-c  https://review.openstack.org/13481902:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Online update mode for compute nodes  https://review.openstack.org/12867302:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Revise troubleshooting text and compute steps  https://review.openstack.org/13482902:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Handle removal of controller mgmt node  https://review.openstack.org/13482802:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Pre/Post upgrade command hooks  https://review.openstack.org/13483102:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Clean up RST formatting & spelling  https://review.openstack.org/13482502:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Add troubleshooting information for VMs not shutting down properly  https://review.openstack.org/13482402:56
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Document workaround for instance network issues  https://review.openstack.org/13482602:56
*** liuxx has quit IRC02:59
*** pradeep has joined #tripleo02:59
*** liuxx has joined #tripleo02:59
*** pradeep1 has quit IRC03:00
*** pradeep1 has joined #tripleo03:03
*** pradeep has quit IRC03:04
*** pradeep has joined #tripleo03:05
*** pradeep1 has quit IRC03:07
openstackgerritMerged stackforge/tripleo-ansible: Add troubleshooting note for SSH  https://review.openstack.org/13175603:08
openstackgerritMerged stackforge/tripleo-ansible: Fixed: Remove o-c-c step from controller/Mgmt  https://review.openstack.org/13175703:08
openstackgerritMerged stackforge/tripleo-ansible: Partial Fix - Give o-c-c children time to exit  https://review.openstack.org/13175803:08
openstackgerritMerged stackforge/tripleo-ansible: Fix to ensure MySQL command line works  https://review.openstack.org/13175903:08
openstackgerritMerged stackforge/tripleo-ansible: Attempt to ensure services are stopped  https://review.openstack.org/13176003:08
openstackgerritMerged stackforge/tripleo-ansible: Setting an ansible.cfg file  https://review.openstack.org/13176103:08
openstackgerritMerged stackforge/tripleo-ansible: Call reset-db instead of sync-db  https://review.openstack.org/13481703:08
openstackgerritMerged stackforge/tripleo-ansible: Recovery information should rebuild not occur  https://review.openstack.org/13481803:09
openstackgerritMerged stackforge/tripleo-ansible: Change controller startup to force o-c-c  https://review.openstack.org/13481903:09
openstackgerritMerged stackforge/tripleo-ansible: Unblock startup of RabbitMQ during upgrade  https://review.openstack.org/13482003:09
openstackgerritMerged stackforge/tripleo-ansible: Start keepalived/haproxy outside of o-r-c  https://review.openstack.org/13482103:09
openstackgerritMerged stackforge/tripleo-ansible: Wait for long running MySQL sync processes  https://review.openstack.org/13482203:09
openstackgerritMerged stackforge/tripleo-ansible: Add documentation assist users with resumption  https://review.openstack.org/13482303:09
openstackgerritMerged stackforge/tripleo-ansible: Add troubleshooting information for VMs not shutting down properly  https://review.openstack.org/13482403:09
openstackgerritMerged stackforge/tripleo-ansible: Clean up RST formatting & spelling  https://review.openstack.org/13482503:09
openstackgerritMerged stackforge/tripleo-ansible: Document workaround for instance network issues  https://review.openstack.org/13482603:09
openstackgerritMerged stackforge/tripleo-ansible: Handle removal of controller mgmt node  https://review.openstack.org/13482803:10
openstackgerritMerged stackforge/tripleo-ansible: Revise troubleshooting text and compute steps  https://review.openstack.org/13482903:10
openstackgerritMerged stackforge/tripleo-ansible: Pre/Post upgrade command hooks  https://review.openstack.org/13483103:10
openstackgerritMerged stackforge/tripleo-ansible: Addition of a nova power controlling module  https://review.openstack.org/13483203:10
openstackgerritMerged stackforge/tripleo-ansible: Online update mode for compute nodes  https://review.openstack.org/12867303:10
openstackgerritMerged stackforge/tripleo-ansible: Add options to group_vars to make it match docs  https://review.openstack.org/13483303:10
*** pradeep has quit IRC03:12
*** pradeep has joined #tripleo03:12
*** Marga_ has joined #tripleo03:14
*** Marga_ has quit IRC03:19
*** nosnos has quit IRC03:20
*** pradeep has quit IRC03:21
*** noslzzp has quit IRC03:27
*** jrist has quit IRC03:28
openstackgerritjiangfei proposed openstack/tripleo-image-elements: Increased protection to prevent vip  https://review.openstack.org/13549403:34
*** jrist has joined #tripleo03:40
*** Marga_ has joined #tripleo03:44
*** funzo has quit IRC03:49
*** funzo has joined #tripleo03:51
*** funzo has quit IRC03:55
*** pradeep has joined #tripleo03:57
*** untriaged-bot has joined #tripleo04:00
untriaged-botUntriaged bugs so far:04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139121804:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138706104:00
uvirtbotLaunchpad bug 1391218 in tripleo "Configuration Dependent on HAProxy" [Undecided,In progress]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329604:00
uvirtbotLaunchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139364304:00
uvirtbotLaunchpad bug 1393296 in tripleo "setup-clienttools failed when using local pip repository" [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139141204:00
uvirtbotLaunchpad bug 1393643 in tripleo "haproxy start failed loop with 'Starting proxy horizon: cannot bind socket'" [Undecided,New]04:00
uvirtbotLaunchpad bug 1391412 in tripleo "devtest  deploy overcloud successfully,but there have one baremetal in  Maintenance state" [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138748704:00
uvirtbotLaunchpad bug 1387487 in tripleo "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui  needs authentication from Keystone" [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139330404:00
uvirtbotLaunchpad bug 1393304 in tripleo "create-nodes failure for customised pool" [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/diskimage-builder/+bug/139165604:00
uvirtbotLaunchpad bug 1391656 in diskimage-builder "There is no way to customize the installation of the bootloader" [Undecided,New]04:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329804:00
uvirtbotLaunchpad bug 1393298 in tripleo "keepalived VRRP_Script(chk_haproxy) timed out" [Undecided,In progress]04:00
*** untriaged-bot has quit IRC04:00
*** Marga_ has quit IRC04:00
*** zz_avozza is now known as avozza04:05
j00148821_is someone there?04:06
*** j00148821_ has quit IRC04:06
*** jiangfei has joined #tripleo04:08
jiangfeihi04:08
*** noslzzp has joined #tripleo04:09
*** nosnos has joined #tripleo04:12
*** avozza is now known as zz_avozza04:14
*** daneyon has quit IRC04:17
*** rushiagr_away is now known as rushiagr04:18
*** vinsh has joined #tripleo04:49
*** Marga_ has joined #tripleo04:57
*** Marga_ has quit IRC05:02
*** marun has joined #tripleo05:03
*** noslzzp has quit IRC05:09
*** pcrews has quit IRC05:19
*** pensu has joined #tripleo05:20
openstackgerritMerged openstack/os-apply-config: Updated from global requirements  https://review.openstack.org/13523905:28
openstackgerritMerged openstack/os-refresh-config: Updated from global requirements  https://review.openstack.org/13524005:28
openstackgerritMerged openstack/tripleo-image-elements: Fix element-deps file name  https://review.openstack.org/13530005:29
SpamapSweird, my baremetal flavor has disk == 10, but I got a 172G / on deploy.05:31
StevenKWhat's $ROOT_DISK set to?05:32
*** marun has quit IRC05:32
StevenKSpamapS: I have an -incubator branch locally that tries to use the new heat-domain stuff from os-cloud-config -- I shall see just how much fail that ends up in tomorrow05:33
SpamapSStevenK: awesome.05:34
SpamapSStevenK: the root disk thing was because ephemeral was set to 190G .. 172G is just whats left05:34
StevenKYeah05:37
StevenKIf $ROOT_DISK is set, then node['disk'] is not /, it's all rather confusing05:37
SpamapSI don't even know what you mean by $ROOT_DISK05:38
StevenKSpamapS: 'because ephemeral was set to 190G' -- it's set via the environment variable $ROOT_DISK05:39
SpamapSit being ephemeral?05:40
StevenKYup05:42
SpamapSahh k, did not set it explicitly, so thats the default maybe?05:43
StevenKscripts/devtest_variables.sh:export ROOT_DISK=${ROOT_DISK:-10}05:47
StevenKSo now I'm confused05:47
SpamapSso thats not ephemeral then05:47
StevenKscripts/setup-baremetal:EPHEMERAL_DISK=$(( $DISK - $ROOT_DISK ))05:47
SpamapSah DISK is 200 in my nodes.json05:48
SpamapSwell rather, the first disk is 20005:48
SpamapSmaybe it got it there.05:48
*** zz_avozza is now known as avozza05:49
*** k4n0 has joined #tripleo05:52
*** subscope has joined #tripleo05:54
*** subscope has quit IRC05:55
*** subscope has joined #tripleo05:55
SpamapSgah, I always forget which smartarray config tool to choose.. f5 or f8 .. f5 takes you into the GUI that takes 3 minutes to boot. :-P05:56
lifelessbecause hardware is good05:56
*** subscope has quit IRC05:56
SpamapSlifeless: we should start a spin-off start-up that just makes hardware that is 100% configurable at all times no matter the state of the system.05:57
*** Marga_ has joined #tripleo05:58
lifelessSpamapS: <305:58
lifelessSpamapS: we could call it Tandem, and the product Nonstop05:59
SpamapSlifeless: you suggesting this is an existing product?06:00
SpamapShm register-nodes doesn't like to be run more than once06:03
StevenKWith ironic it should deal06:03
*** Marga_ has quit IRC06:03
StevenKSpamapS: What output are you seeing?06:03
SpamapS2014-11-18 22:03:29 - os_cloud_config.nodes - DEBUG - Extra registered node 0ddde449-6094-4c12-a770-f2318b4a6829 found.06:04
SpamapS2014-11-18 22:03:29 - os_cloud_config.nodes - DEBUG - Extra registered node d9c35214-3ed8-43dc-a4e6-38937ca251ff found.06:04
*** avozza is now known as zz_avozza06:04
SpamapSStevenK: I added a node to nodes.json06:04
StevenKThen it couldn't match up the existing nodes. :-(06:07
SpamapSStevenK: I believe it is a case issue06:08
SpamapSStevenK: ironic downcases the macs06:08
SpamapSStevenK: so os-cloud-config needs to as well06:08
SpamapSfor the search to work06:09
StevenKSpamapS: Ooooh. File a bug and assign it to me06:09
SpamapSStevenK: https://bugs.launchpad.net/os-cloud-config/+bug/139408406:10
uvirtbotLaunchpad bug 1394084 in os-cloud-config "uppercase hex digits in MAC addresses in nodes list confuse register-nodes" [Medium,Triaged]06:10
SpamapSstill not adding the new one I added06:12
*** david-lyle_afk has quit IRC06:12
SpamapSmy bad06:17
SpamapSaccidentally duped some detials06:17
*** yrabl has quit IRC06:19
*** yrabl has joined #tripleo06:19
*** yrabl has quit IRC06:26
SpamapSStevenK: that bug may not be legit. ;)06:34
*** k4n0 has quit IRC06:39
*** rlandy has joined #tripleo06:47
*** mrunge has joined #tripleo06:50
*** k4n0 has joined #tripleo06:53
*** Marga_ has joined #tripleo06:59
*** Marga_ has quit IRC07:03
*** akrivoka has joined #tripleo07:04
*** jprovazn has joined #tripleo07:09
*** dsneddon has quit IRC07:10
marios_o/07:10
marios_greghaynes: ping, hey - was on mobile for last night's meeting but... I think you said you'd done releases before right? anyway ping if there is anything (but the documented release notes are basically all there is)07:11
*** jang1 has joined #tripleo07:17
*** dshulyak has joined #tripleo07:18
*** kevinbenton has quit IRC07:22
*** k4n0 has quit IRC07:31
*** k4n0 has joined #tripleo07:44
*** dshulyak has quit IRC07:44
*** yrabl has joined #tripleo07:46
*** Marga_ has joined #tripleo07:51
*** yrabl1 has joined #tripleo07:53
*** yrabl has quit IRC07:55
openstackgerritGhe Rivero proposed openstack/diskimage-builder: Warning when using pypi element without a mirror  https://review.openstack.org/13531607:55
GheRiveromorning all07:57
*** jtomasek has quit IRC07:58
*** ifarkas has joined #tripleo08:09
openstackgerritDougal Matthews proposed openstack/tuskar: Updated from global requirements  https://review.openstack.org/13552608:11
jiangfeihi, in controller node , i dont kown why apache2 is started before it's ports.conf modify and who start it?  somebody can help?08:16
jiangfeii deploy the cluster twice, it the same error every time.08:23
openstackgerritMerged openstack/tuskar-ui: Make progress code extandable  https://review.openstack.org/13495308:25
openstackgerritMerged openstack/tuskar-ui: Optimize heat.Resource.get_by_node  https://review.openstack.org/13522508:25
*** chlong has quit IRC08:34
openstackgerritMerged openstack/tripleo-image-elements: Restart stunnel earlier in configure.d  https://review.openstack.org/13320408:38
*** jp_at_hp has joined #tripleo08:53
*** jcoufal has joined #tripleo08:58
*** jcoufal has quit IRC09:01
*** jcoufal has joined #tripleo09:01
*** jcoufal has quit IRC09:01
*** jcoufal has joined #tripleo09:02
*** nosnos has quit IRC09:07
openstackgerritJames Polley proposed openstack-infra/tripleo-ci: Updates to the CI doc  https://review.openstack.org/13371509:08
*** nosnos has joined #tripleo09:08
openstackgerritJames Polley proposed openstack-infra/tripleo-ci: Updates to the CI doc  https://review.openstack.org/13371509:14
*** Marga_ has quit IRC09:17
openstackgerritMerged openstack/tripleo-image-elements: Install and configure MySQL `clustercheck`  https://review.openstack.org/11644909:17
*** Marga_ has joined #tripleo09:22
*** vipul has quit IRC09:27
*** dtantsur|afk is now known as dtantsur09:29
*** regebro has joined #tripleo09:30
*** zz_avozza is now known as avozza09:34
GheRiveroagh! pip is broken in Debian :/09:35
tchaypothe seed in hp1 wasn’t responding to network or console so i restarted it09:35
tchaypoGheRivero: tell me more09:35
GheRiverohttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=77015709:37
uvirtbotDebian bug 770157 in libpython2.7-stdlib "[libpython2.7-stdlib] Missing attribute PROTOCOL_SSLv3" [Grave,Open]09:37
GheRiveroand related: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=76861109:39
uvirtbotDebian bug 768611 in python2.7 "python2.7: Building without SSLv3 support" [Normal,Fixed]09:39
GheRiveroa new python-openssl is needed which is not yet available09:46
openstackgerritTom Cammann proposed openstack/tripleo-heat-templates: Add key/cert to secure MySQL clustering with TLS  https://review.openstack.org/13555109:48
*** Marga_ has quit IRC09:51
*** pelix has joined #tripleo09:51
openstackgerritMerged openstack/diskimage-builder: deploy-kexec depends on deploy  https://review.openstack.org/13530109:59
openstackgerritMerged openstack/diskimage-builder: Remove duplicate binary-deps from dracut-ramdisk  https://review.openstack.org/13462409:59
*** lucasagomes has joined #tripleo09:59
*** vipul has joined #tripleo09:59
*** untriaged-bot has joined #tripleo10:00
untriaged-botUntriaged bugs so far:10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139121810:00
uvirtbotLaunchpad bug 1391218 in tripleo "Configuration Dependent on HAProxy" [Undecided,In progress]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138706110:00
uvirtbotLaunchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329610:00
uvirtbotLaunchpad bug 1393296 in tripleo "setup-clienttools failed when using local pip repository" [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139364310:00
uvirtbotLaunchpad bug 1393643 in tripleo "haproxy start failed loop with 'Starting proxy horizon: cannot bind socket'" [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139141210:00
uvirtbotLaunchpad bug 1391412 in tripleo "devtest  deploy overcloud successfully,but there have one baremetal in  Maintenance state" [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138748710:00
uvirtbotLaunchpad bug 1387487 in tripleo "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui  needs authentication from Keystone" [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139330410:00
uvirtbotLaunchpad bug 1393304 in tripleo "create-nodes failure for customised pool" [Undecided,New]10:00
untriaged-bothttps://bugs.launchpad.net/diskimage-builder/+bug/139165610:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329810:00
uvirtbotLaunchpad bug 1391656 in diskimage-builder "There is no way to customize the installation of the bootloader" [Undecided,New]10:00
*** untriaged-bot has quit IRC10:00
uvirtbotLaunchpad bug 1393298 in tripleo "keepalived VRRP_Script(chk_haproxy) timed out" [Undecided,In progress]10:00
*** Marga_ has joined #tripleo10:02
*** rdopiera has joined #tripleo10:07
*** xuhaiwei_ has quit IRC10:14
*** pblaho has joined #tripleo10:17
*** Marga_ has quit IRC10:17
*** gfidente has joined #tripleo10:22
*** jtomasek has joined #tripleo10:27
GheRiveroanybody know why we did this change? https://review.openstack.org/#/c/131229/10:30
GheRiveros/pypi.openstack.org/pypi.python.org/10:30
GheRiverogreghaynes: ^^10:31
*** liuxx has quit IRC10:50
tchaypoGheRivero: greghaynes: I think that’s a good example of a commit message that violates the first principle of https://wiki.openstack.org/wiki/GitCommitMessages#Information_in_commit_messages11:02
tchaypothe commit message describes what was done, but I can see that by looking at the change. It doesn’t describe why this happened, so now we’re all confused.11:03
tchaypoGheRivero: those are lovely bugs btw11:03
GheRiveroalso, pypi.openstack.org/simple is not dead. (At least now) That's why I'm confused11:04
tchaypo*sigh* I wanted to figure out why my undertake node in hp2 can’t talk to heat on the seed11:06
tchayposo i decided to compare with hp111:06
tchaypobut to do that on hp1, i had to restart the seed, and of course now hp1 is broken too11:06
GheRivero:)11:07
*** yrabl has joined #tripleo11:09
*** yrabl1 has quit IRC11:09
openstackgerritGhe Rivero proposed openstack/diskimage-builder: Add DIB_DEBOOTSTRAP_EXTRA_ARGS environment variable  https://review.openstack.org/9251711:24
*** Marga_ has joined #tripleo11:24
tchaypoit seems to me as though the image I’ve built is missing stuff from /etc/os-collect-config.conf11:43
tchaypoand probably other stuff. so let me go check the disk build to see if i can see errors11:43
*** ekarlso- has quit IRC11:44
*** pensu has quit IRC11:45
greghaynesGheRivero: Apparently pypi.o.o is no longer supported, im not sure what that means11:48
greghaynesGheRivero: but CI was failing because some packges werent updated and we were told 'dont use it'11:48
greghaynesSupposedly you have to use a region-specific pypi mirror now11:49
*** ekarlso- has joined #tripleo11:50
GheRiverogreghaynes: yeah. I found some info in the logs from #openstack-infra. Sorry about the noise11:51
tchaypowe have region-specific mirrors?11:51
greghaynesGheRivero: is np11:51
greghaynestchaypo: we dont11:51
greghaynestchaypo: but infra does11:52
GheRiverohttp://pypi.dfw.openstack.org/11:52
GheRiverodon't know what dfw is11:52
tchaypodallas fort-worth11:52
tchaypowell.11:53
tchaypothat’s if it’s an airport.11:53
tchaypohttp://www.urbandictionary.com/define.php?term=dfw gives a different meaning11:53
greghaynespretty sure thats it11:53
greghayneshaha11:53
greghaynespypi is down for whatever11:53
GheRivero+2 :)11:54
tchaypodoes that mean pypi knows the best gel to use for transferring a picture to wood?11:56
openstackgerritgreghaynes proposed openstack/diskimage-builder: Make some pkg-map errors soft  https://review.openstack.org/13557712:01
*** Marga_ has quit IRC12:03
*** blinky_ghost has joined #tripleo12:05
openstackgerritJon-Paul Sullivan (jp_at_hp) proposed openstack/diskimage-builder: Allow multiple identical sources  https://review.openstack.org/13558012:06
gfidentedo we have in the templates something which allows us to repeat a string for each item of an attribute .. but ignoring the actual item value?12:08
rdopiera"item"?12:09
gfidenteeg. I have three items in Controller.hostname and want a particular key to be set to : 0,1,212:09
gfidentehi rdopiera , thanks :)12:09
rdopierano, I'm just asking what you mean12:09
gfidenteyeah mine was a thanks in advance12:09
gfidenteso that's what I want to achieve12:09
rdopieraalso, I just realized that you are talking about heat templates, not django templates12:10
rdopierasorry12:10
gfidenteheat templates yes12:10
rdopieratoo many channels12:10
greghaynesgfidente: how are you going to know which item to include in the list and which not to?12:19
greghaynesis there a special propery some of them have?12:19
greghaynesif so, then you can do it in mustache12:19
gfidentegreghaynes, looking into that, thanks12:20
greghaynes{{#controller.hostname}}{{#property_name}}{{id}}{{/property_name}}{{/controller.hostname}}12:20
openstackgerritRadomir Dopieralski proposed openstack/tuskar-ui: Add a scale-out dialog  https://review.openstack.org/13558312:23
*** noslzzp has joined #tripleo12:24
rdopieralsmola: can you help me with https://review.openstack.org/#/c/135583/1/tuskar_ui/api/heat.py ?12:24
*** pensu has joined #tripleo12:25
*** rhallisey has joined #tripleo12:26
*** noslzzp has quit IRC12:26
openstackgerritgreghaynes proposed openstack/diskimage-builder: Make some pkg-map errors soft  https://review.openstack.org/13557712:27
openstackgerritgreghaynes proposed openstack/diskimage-builder: Add new package-installs system  https://review.openstack.org/13491712:27
*** ccrouch has quit IRC12:39
*** lucasagomes is now known as lucas-hungry12:45
*** dshulyak has joined #tripleo12:45
*** dshulyak has quit IRC12:46
*** dshulyak has joined #tripleo12:46
*** dshulyak has quit IRC12:48
*** ekarlso- has quit IRC12:50
*** ekarlso- has joined #tripleo12:50
lsmolardopiera: maybe the password is not needed12:52
lsmolardopiera: otherwise looks good, update call should be the same as create12:52
lsmolardopiera: ah so it can be exactly the same12:54
lsmolardopiera: they remove the password from there https://github.com/openstack/horizon/blob/master/openstack_dashboard/api/heat.py#L10512:54
lsmolardopiera: :-)12:54
gfidentegreghaynes, what if I just needed 0,1,2 and not a particular property value?12:57
greghaynesgfidente: you need to put another subproperty in each one (I was using id in my example)12:58
greghaynesis this for rmq or something?12:58
*** ccrouch has joined #tripleo12:58
greghaynestheres really just a narrow case where it might be possible, most cases doing something like that is not possible in heat12:58
gfidentegreghaynes, for ceph, to build the mapping of monitors ids to the monitors config section12:58
gfidenteI think I can use arbitrary strings though too, so hostname maybe, thanks meanwhile12:59
*** noslzzp has joined #tripleo13:04
openstackgerritLennart Regebro proposed openstack/tuskar-ui: Adding a block in the node details template  https://review.openstack.org/13559213:05
*** pensu has quit IRC13:05
*** regebro is now known as regebro|fuud13:06
*** pensu has joined #tripleo13:07
*** pensu has quit IRC13:07
*** akrivoka has quit IRC13:09
*** ifarkas has quit IRC13:12
*** ifarkas has joined #tripleo13:12
*** rushiagr is now known as rushiagr_away13:14
*** bcrochet has quit IRC13:17
rdopieralsmola: awesome13:17
*** bcrochet has joined #tripleo13:21
*** regebro|fuud is now known as regebro13:21
greghayneshrmmm, interesting problem13:25
greghaynestcammann: so about enabling galera replication with ssl13:26
greghaynestcammann: AIUI you have to restart the whole cluster to turn that on/off13:26
greghayneswhich means if we 'just merge it' then we break updates for all our users :(13:26
*** athomas has joined #tripleo13:27
greghaynesI dont really have a great idea for how to do this in a backwards compat way though...13:27
*** dave-mcnally has joined #tripleo13:29
greghaynesthis might be a thing where we have to be default no ssl replication for a while (and require a flag or somesuch to turn on) while we give a deprecation message13:29
*** lucas-hungry is now known as lucasagomes13:30
greghaynesand then in 6 mo. we assume everyone has found a way to reboot their steups into ssl13:30
greghaynesSpamapS: ^ when youre up you might have some ideas on this?13:31
tcammanngreghaynes: hello13:31
greghaynestcammann: hey!13:31
tcammanngreghaynes: you can't update with TLS on?13:34
greghaynestcammann: Any idea if im correct about rebooting the whole cluster to turn ssl rep. on/off? I havent actually experimented with it but just reading docs13:34
*** akrivoka has joined #tripleo13:34
greghaynesWhat I am reading says you cannot have a mixed cluster of ssl and non ssl13:34
tcammanngreghaynes: You are probably right about turning it off and on, but I don't see why you can't leave it on during an update.13:34
greghaynesyea, so you have to turn ssl on for all or none at the start :(13:36
tcammannWell it could be possible to jury rig stunnel to act as the go between for the clustering13:38
tcammannI hadn't thought to much about update though13:38
greghayneshaha13:38
greghaynesyea, IMO we can just use the out of box, I was mostly just curious if youall had run into this?13:38
*** weshay has joined #tripleo13:39
tcammannNo, but we have been working on an update method to turn the rest of the services TLS on and off, but that is mainly through stunnel.13:40
greghaynesah13:40
greghaynesYea, galera will really not be happy about that, but this seems like its really just a backwards compat issue (once its on for the cluster doing an update with it still on should be fine)13:41
greghaynesok, just wanted to give some context for my patch comments13:42
tcammanngreghaynes: thanks for the comments :)13:45
*** dprince has joined #tripleo13:45
*** jdob has joined #tripleo13:52
*** jistr has joined #tripleo13:53
*** jistr is now known as jistr|mtg13:53
*** tzumainn has joined #tripleo13:56
*** yamahata has quit IRC13:57
*** noslzzp has quit IRC13:57
*** yamahata has joined #tripleo13:57
*** dtantsur is now known as dtantsur|lunch13:58
openstackgerritTom Cammann proposed openstack/tripleo-heat-templates: Add key/cert to secure MySQL clustering with TLS  https://review.openstack.org/13555113:59
openstackgerritgreghaynes proposed openstack/diskimage-builder: Make some pkg-map errors soft  https://review.openstack.org/13557714:01
*** cwolferh has joined #tripleo14:01
openstackgerritgreghaynes proposed openstack/diskimage-builder: Add new package-installs system  https://review.openstack.org/13491714:02
*** ccrouch has quit IRC14:02
*** liuxx has joined #tripleo14:03
*** ccrouch has joined #tripleo14:06
*** pradeep has quit IRC14:07
*** noslzzp has joined #tripleo14:08
openstackgerritMerged openstack/python-tuskarclient: Updated from global requirements  https://review.openstack.org/13480014:09
*** pblaho has quit IRC14:11
*** Marga_ has joined #tripleo14:12
*** noslzzp has quit IRC14:13
*** noslzzp has joined #tripleo14:16
*** rushiagr_away is now known as rushiagr14:22
*** Kiall has joined #tripleo14:28
*** funzo has joined #tripleo14:29
*** kpavel has joined #tripleo14:32
*** openstackgerrit has quit IRC14:33
*** openstackgerrit has joined #tripleo14:34
*** derekh has joined #tripleo14:34
kpavelIs there a way to use tripleo elements with diskimage-builder in order to install (and customize) nova-compute on an existing vm?14:35
*** morazi has joined #tripleo14:35
*** pradeep has joined #tripleo14:39
rhalliseylarsks, Hey! I had a question.  I want horizon to check that nova and neutron are running.14:41
larsksSounds reasonable.14:41
rhalliseylarsks, what would be the nova_api_url of these three14:41
rhalliseyor all of them maybe14:41
rhallisey"http://${NOVA_API_SERVICE_HOST}:8774/v3"14:41
rhallisey"http://${NOVA_API_SERVICE_HOST}:8774/v2/\$(tenant_id)s"14:41
rhallisey"http://${NOVA_EC2_API_SERVICE_HOST}:8773/services/Cloud"14:41
larsksIf you just want to check for availability, just http://${NOVA_API_SERVICE_HOST}:877414:42
rhalliseylarsks, ok perfect14:43
larsksYou should get a successful response from that.14:43
rhalliseythanks14:43
*** pradeep1 has joined #tripleo14:46
*** pradeep has quit IRC14:48
*** openstackgerrit has quit IRC14:49
*** openstackgerrit has joined #tripleo14:49
*** pradk has joined #tripleo14:50
*** pradeep has joined #tripleo14:52
*** nosnos has quit IRC14:52
*** pradeep1 has quit IRC14:53
*** pradeep has quit IRC14:56
openstackgerritAndrea Rosa proposed openstack/os-cloud-config: Passing OS_CACERT to clients  https://review.openstack.org/13224614:57
*** pradeep has joined #tripleo14:57
*** avozza is now known as zz_avozza14:58
openstackgerritAndrea Rosa proposed openstack/os-cloud-config: Passing OS_CACERT to clients  https://review.openstack.org/13224614:59
*** pradeep1 has joined #tripleo15:00
*** zz_avozza is now known as avozza15:00
openstackgerritMerged openstack/tripleo-image-elements: Change rabbitmq-server log file names to not use the '@' character.  https://review.openstack.org/13539515:01
*** pradeep has quit IRC15:02
*** mrunge has quit IRC15:03
*** yrabl has quit IRC15:08
*** liuxx has quit IRC15:13
*** liuxx has joined #tripleo15:13
blinky_ghostlsmola: hi :) only now I have time to test this again. Can you tell me how do you setup you network on overcloud nodes? I use eth1 for external connectivity and eth2 for pxe. Is this correct?15:13
*** kpavel has quit IRC15:16
*** Marga_ has quit IRC15:23
*** Marga_ has joined #tripleo15:24
openstackgerritAndrea Rosa proposed openstack/os-cloud-config: Passing OS_CACERT to clients  https://review.openstack.org/13224615:25
*** pcrews has joined #tripleo15:36
*** dtantsur|lunch is now known as dtantsur15:42
*** jerryz has quit IRC15:44
*** dave-mcnally has quit IRC15:47
*** pradeep has joined #tripleo15:48
*** pradeep1 has quit IRC15:48
*** daneyon has joined #tripleo15:48
*** pcrews has quit IRC15:55
*** jprovazn is now known as jprovazn_afk15:56
*** pradeep1 has joined #tripleo15:56
*** pradeep has quit IRC15:57
*** Marga_ has quit IRC15:58
*** pradeep has joined #tripleo15:59
*** liuxx has quit IRC15:59
*** pcrews has joined #tripleo16:00
*** untriaged-bot has joined #tripleo16:01
untriaged-botUntriaged bugs so far:16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139121816:01
uvirtbotLaunchpad bug 1391218 in tripleo "Configuration Dependent on HAProxy" [Undecided,In progress]16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138706116:01
uvirtbotLaunchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New]16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139364316:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139141216:01
uvirtbotLaunchpad bug 1393643 in tripleo "haproxy start failed loop with 'Starting proxy horizon: cannot bind socket'" [Undecided,New]16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138748716:01
uvirtbotLaunchpad bug 1391412 in tripleo "devtest  deploy overcloud successfully,but there have one baremetal in  Maintenance state" [Undecided,New]16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139330416:01
uvirtbotLaunchpad bug 1387487 in tripleo "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui  needs authentication from Keystone" [Undecided,New]16:01
*** pradeep1 has quit IRC16:01
untriaged-bothttps://bugs.launchpad.net/diskimage-builder/+bug/139165616:01
uvirtbotLaunchpad bug 1393304 in tripleo "create-nodes failure for customised pool" [Undecided,New]16:01
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329816:01
uvirtbotLaunchpad bug 1391656 in diskimage-builder "There is no way to customize the installation of the bootloader" [Undecided,New]16:01
*** untriaged-bot has quit IRC16:01
uvirtbotLaunchpad bug 1393298 in tripleo "keepalived VRRP_Script(chk_haproxy) timed out" [Undecided,In progress]16:01
*** pradeep1 has joined #tripleo16:01
*** pradeep has quit IRC16:04
*** pradeep has joined #tripleo16:06
*** pradeep1 has quit IRC16:08
openstackgerritDerek Higgins proposed openstack-infra/tripleo-ci: Nothing to see here  https://review.openstack.org/11101116:09
*** funzo has quit IRC16:10
*** rlandy has quit IRC16:14
*** jehb has joined #tripleo16:16
*** dshulyak has joined #tripleo16:16
tchaypoSpamapS: let me know when you’re around16:20
* tchaypo tries to figure out how the 169.254.169.254 thing is meant to work16:21
*** vinsh has quit IRC16:21
*** pradeep1 has joined #tripleo16:23
*** marun has joined #tripleo16:24
*** pradeep has quit IRC16:25
rdopierahow can I check the signature of stack_update in heatclient?16:27
*** marun_ has joined #tripleo16:28
GheRiverotchaypo: was your issue with the metadata?16:29
*** marun has quit IRC16:30
rdopieralsmola: I'm still getting "Error: Unable to deploy overcloud. Reason: Missing required credential: X-Auth-Key"16:30
openstackgerritRadomir Dopieralski proposed openstack/tuskar-ui: Add a scale-out dialog  https://review.openstack.org/13558316:31
*** vinsh has joined #tripleo16:34
*** dshulyak has quit IRC16:34
*** marun_ has quit IRC16:34
*** dshulyak has joined #tripleo16:34
openstackgerritRadomir Dopieralski proposed openstack/tuskar-ui: Add a scale-out dialog  https://review.openstack.org/13558316:34
*** marun_ has joined #tripleo16:35
*** dshulyak has quit IRC16:35
*** dshulyak has joined #tripleo16:37
tchaypoI don16:37
tchaypo’t know what the error is to be honest - i thought the problem was that os-collect-config can’t get data from the metadata service but then I found that hp1 can’t get metadata either16:38
tchaypobut on the other hand, hp1 has an /etc/os-collect-config.conf that has stuff in, hp2 doesn’t. So I’m also thinking that maybe the problem is with dib not having data to put in the file..16:38
*** kpavel has joined #tripleo16:39
tchaypobut on the gripping hand, i can’t see any differences re os-collect-config data in the heat templates on hp2/hp116:39
tchaypobut on the fourth hand: i had to restart both seeds, and i know other services didn’t come up well, so maybe the metadata service used to work on hp1..16:41
openstackgerritTom Cammann proposed openstack/tripleo-heat-templates: Add option for MySQL to bind locally  https://review.openstack.org/13564616:42
openstackgerritDan Prince proposed openstack/tripleo-incubator: Revert "Encapsulate getting image for a deployment."  https://review.openstack.org/13564716:42
dprinceGheRivero: ^^16:42
dprinceslagle: ^^16:43
tcammanngreghaynes: Just put up another patch for MySQL TLS, could you take a peek.16:43
greghaynesdprince: eek16:44
greghayneslifeless: ^ too16:44
dprincegreghaynes: eek?, for the acquire-image revert? That hosed my entire environment sir16:45
greghaynessince he seems to have written most of it16:45
greghaynesyea, I saw your patches to fix caching16:45
*** jehb has quit IRC16:45
greghaynesdprince: parsing your commit msg, USE_CACHE=1 is basically broken right now?16:46
dprincegreghaynes: yes, totally hosed16:46
dprincels16:46
greghaynestcammann: sure16:46
tchaypojust to check I’m reading it right16:47
tchaypoacquire-image grabs the upstream cloud image, right?16:47
tchaypoit’s not acquiring an image from dib?16:47
tchaypomrm. nope, it runs dib as well.16:47
greghaynestchaypo: I think its basically an indirection layer16:48
greghaynesyea, so check for image elsewhere, if not then run dib16:48
*** dmellado has quit IRC16:48
tchaypoassuing dib is passed in in the right positional argument to become BUILD_COMMAND16:48
tchaypooh yuck16:48
tchaypoit actually uses a variable called USE_CACHE but it’s script-local, defaults to off, and can only be changed by a command line argument16:49
*** jcoufal has quit IRC16:49
* greghaynes doesnt mind arguments16:49
greghaynesbut if we broke an existing user interface then thats bad16:50
dprincegreghaynes: I think the right thing to do is revert and then argue about it16:50
greghaynesyep, I +2'd :)16:50
dprincegreghaynes: ack, thanks16:50
tchaypoif I’d noticed that it broke USE_CACHE I would have -1d the original16:51
*** marun has joined #tripleo16:52
*** pradeep has joined #tripleo16:53
*** marun__ has joined #tripleo16:53
*** pradeep1 has quit IRC16:54
greghaynestcammann: You were referring to https://review.openstack.org/#/c/135551/ ?16:54
*** marun_ has quit IRC16:55
tcammanngreghaynes: nope, https://review.openstack.org/#/c/135646/16:55
greghaynesah16:56
*** k4n0 has quit IRC16:56
greghaynestcammann: is there a reason to use stunnel over the native support?16:56
*** marun has quit IRC16:57
GheRiverotchaypo: did you check that all iptables rules are there after the reboot? (happened to me a long time ago)16:58
tchaypooh sure16:58
tchaypoi checked, and they aren’t.16:58
*** blinky_ghost has quit IRC16:58
tchaypothat’s what I’m currently chasing, trying to figure out how to get them back16:58
tchaypothat is to say: there’s no rule that nats from 169.254.169.254:80 to the right ip:port16:58
*** avozza is now known as zz_avozza17:00
*** marun__ is now known as marun17:02
openstackgerritRyan Brady proposed openstack/diskimage-builder: Deprecate map-packages, replaced by pkg-map  https://review.openstack.org/13025217:03
greghaynesdprince: btw, did you see https://review.openstack.org/#/c/135577/ ?17:03
*** pradeep1 has joined #tripleo17:04
openstackgerritRyan Brady proposed openstack/diskimage-builder: Deprecate map-packages, replaced by pkg-map  https://review.openstack.org/13025217:04
dprincegreghaynes: I do now. Will take a look17:04
tcammanngreghaynes: refreshing certs!17:04
greghayneshrm17:04
tcammanngreghaynes: you can't refresh the certificates during operation if you use native. Once they expire you need to restart the service17:05
*** pradeep has quit IRC17:06
greghaynesand the reason you need to use stunnel on client side also is because the client has some mysql-specific magic in the proto if you use native ssl?17:06
SpamapStcammann: we could, you know, fix that. :)17:11
SpamapSSIGHUP to reload stuff is a pretty well established pattern17:11
*** jtomasek has quit IRC17:12
greghaynes+117:12
tcammanngreghaynes: yes I believe so, I would have to check the specifics with the author.17:13
SpamapStchaypo: how can I be of service?17:13
*** pradeep has joined #tripleo17:13
tcammannSpamapS: yes it should be fixed, but that will require a lot of coordination and time17:14
*** pensu has joined #tripleo17:14
SpamapStcammann: it may be less time than it takes to stabilize double-proxying mysql over haproxy and stunnel17:14
*** pradeep1 has quit IRC17:14
greghaynesreguardless, id kind of like to see native support go in first rather than going straight for solving the reloading certs issue17:15
greghaynessince thats something we dont support at all right now17:15
greghaynesI dont think we really have any client ssl things implemented actually....17:16
openstackgerritDerek Higgins proposed openstack-infra/tripleo-ci: Nothing to see here  https://review.openstack.org/11101117:16
greghaynesso this could end up oncovering a reasonable amount of work17:16
SpamapSI also don't think restarting things just to reload certs is all that horrible.17:17
greghaynesyea, I wonder how graceful we could make that with galera...17:18
tcammannIts not possible with galera as the cluster has to use the same cert on each node17:18
greghaynesI imagine pretty graceful if we remove from haproxy, wait for all transactions to finish, then stop17:19
SpamapSgreghaynes: we should be able to get config options added to oslo.db that would add the SSL and cert options to mysql. Those may already have been added really. Once that's done, it's just a matter of making client certs on machines and signing them.17:19
greghaynestcammann: that applies for the client side ssl?17:19
SpamapStcammann: "not possible" sounds wrong.17:19
SpamapStcammann: "complicated" ?17:19
tcammanngreghaynes: not the same for service to mysql17:20
greghaynesSpamapS: Sure, we also need to support adding a custom CA to the root certs list, and then also turn it on in a backward compat way17:20
SpamapSgreghaynes: that's a pretty normal thing.17:21
greghaynesspeaking of backwards compat - did you see our issue with turning on ssl for galera replication requireing the whole cluster to be restarted?17:22
SpamapSI did see that.17:23
SpamapSThat sounds like something they could solve, but maybe nobody is funding that development.17:23
greghaynesdoes the plan of keeping it off by default, deprecation warning for a while, then turning it on by default seem sane?17:23
SpamapSIn production if I was faced with that, I'd just start an async replication to a new set of Galera servers that already have it set up, and then move the VIP to the new ones.17:24
greghaynesyea, its wierd but *shrug*17:24
greghaynesah, sounds like the good ol postgres HA setup I know17:24
greghaynes:p17:24
SpamapSThats basically how I did every MySQL upgrade I ever attended to.17:24
SpamapSStart new async replication... run tools to ensure data is in sync.. then move when you're ready.17:25
SpamapSProductizing that is hard.17:26
tchaypoSpamapS: I don’t remember actually. I think there was something we were going to talk about more last night17:27
tchaypobut the most detail I can remember right now is “get hp2 up and running”, but i think we were talking about something more specific17:28
SpamapStchaypo: get hp2 up and running... today at 22:00UTC ?17:29
greghaynestcammann: So I wasnt totally clear, were you saying that with galera we cannot have different client-facing ssl certs in use between servers?17:29
tchaypotoday at 2200UTC? I remember it as last night around 2100CET, so that sounds about right17:29
*** pradk has quit IRC17:30
openstackgerritAndrea Rosa proposed openstack/os-cloud-config: Passing OS_CACERT to clients  https://review.openstack.org/13224617:33
*** noslzzp has quit IRC17:34
*** noslzzp has joined #tripleo17:36
*** rushiagr is now known as rushiagr_away17:37
*** derekh has quit IRC17:41
*** pradeep1 has joined #tripleo17:44
*** pradeep has quit IRC17:45
*** zz_avozza is now known as avozza17:46
tchaypohuh.17:47
tchaypoI run os-collect-config with —cfn-metadata-url and it ignores it and tries to talk to 169.254.169.254 instead17:47
tchaypoos the cfn metadata only meant to be used in addition to the ec2 metadata?17:48
*** vinsh has quit IRC17:48
*** Marga_ has joined #tripleo17:50
greghaynestchaypo: I think its just a matter of what collectors you have configured17:50
greghaynestchaypo: so --collectors would also need to be set I thik17:50
tchaypoah17:51
tchaypo(default: heat_local ec2 cfn heat)17:51
tchaypothat explain why when i use —ec2-metadata-url it talks to that first17:52
*** rdopiera has quit IRC17:55
*** lucasagomes is now known as lucas-dinner17:56
SpamapSI use 'os-collect-config --print ec2' sometimes just to look at the ec2 metadata service.17:56
tchaypoah, bazinga17:57
tchaypoon my undercloud node that isn’t working, there’s nothing in /var/lib/heat-cfntools17:57
tchaypoergo the first run of os-collect-config that sets up os-collect-config.conf so it can pull data from heat on subsequent runs doesn’t work17:58
SpamapStchaypo: cloud-init fail?17:58
*** dtantsur is now known as dtantsur|afk17:58
tchaypoon top of this (or maybe it’s the cause, maybe that data comes from the ec2 metadata service in the first place?) it seems that something is broken in the rules that direct traffic for 169.254.169.254:80 to 10.23.212.3:877517:59
*** ifarkas has quit IRC18:00
tchaypookay, maybe two different things are wrong there. the undercloud node in hp1 has an iptables rule that should grab traffic for 169.254.169.254:80 and rewrite it to 169.254.169.254:8775, but I’m seeing traffic for 169.254.169.254:80 hit the seed anyway - so that rule doesn’t seem to be effective18:00
tchaypoand also neither seed seems to have anything to direct the traffic to the right local ip18:00
*** eghobo has joined #tripleo18:00
tchaypoin hp118:01
tchaypoos-collect-config --ec2-metadata-url=http://10.10.16.131:8775/1.0 --print ec218:01
tchaypoworks - without the explicit —c2-metadata-url it tries to use the default 169.254.169.254:8018:02
tchaypoand can’t connect18:03
SpamapStchaypo: do you have the pushed route?18:04
tchaypoon hp1 yes18:04
tchaypoand also on hp218:04
tchaypoin both cases tcpdump shows me the traffic hitting the seed, so the routing is working - but it’s hitting the seed on port 80 rather than 877518:05
tchaypo18:04:19.630051 IP 10.10.16.134.56419 > 169.254.169.254.80: Flags [S], seq 3007823777, win 29200, options [mss 1460,sackOK,TS val 2889897072 ecr 0,nop,wscale 7], length 018:05
tchaypoos-collect-config --debug --ec2-metadata-url=http://169.254.169.254:8775/1.0 --print ec2 — traffic hits the seed, looking for 169.254.169.254:8775, no answer18:06
*** vinsh has joined #tripleo18:06
tchaypoin hp2, —ec2-metadata-url=http://10.23.212.3:8000 makes it connect with the service - but since /etc/os-collect-config.conf lacks credentials, the response it gets is a 400 “Client Error: IncompleteSignature"18:08
*** eghobo has quit IRC18:09
*** pelix has quit IRC18:09
tchaypooh, but that happens on hp1 as well. I’m hitting 8000 on hp2 and 8775 on hp1.18:10
SpamapStchaypo: it should be hitting the seed on port 80, and there should be DNAT rule to send that to 877518:10
tchaypoother way around18:10
tchaypooh that’s better - —ec2-metadata-url=http://http://10.23.212.3:8775/1.0 works nicely in hp218:11
SpamapSNg: here? Ever had problems ssh'ing into ILO's from trusty?18:11
SpamapSNg: I can't seem to SSH into any of the blade ILO's from trusty...18:11
tchaypospamaps: it’s hitting the seed on port 80, but there’s no dnat rule that I can find18:11
SpamapSReceived disconnect from 10.1.66.131: 11:  Client Disconnect18:11
SpamapStchaypo: iptables -t nat -L shows nothing?18:13
tchaypocorrect18:13
tchaypoon the seed, right?18:13
SpamapSspooky18:13
SpamapSyeah18:13
*** pradeep1 has quit IRC18:13
*** pradeep has joined #tripleo18:14
tchaypoon the undercloud node, there's18:14
tchaypoREDIRECT   tcp  --  anywhere             169.254.169.254      tcp dpt:http redir ports 877518:14
*** dshulyak has quit IRC18:15
tchaypowell, on the seed, there’s lots of things, but they’re all just creating and jumping to lots of chains with  no rules in them18:15
SpamapStchaypo: ahhhhh ok thats how its done I was confused then18:16
SpamapS  689 41340 REDIRECT   tcp  --  br-ctlplane *       0.0.0.0/0            169.254.169.254      tcp dpt:80 redir ports 877518:17
SpamapSI have that on my seed18:17
tchaypopeeling back the layers: i can now run os-collect-config on hp2, but it fails on 52-mysql-init18:17
tchaypoWe are neither cluster initialiser or joiner. Refusing to bootstrap mysql cluster until role is known18:17
*** pradeep1 has joined #tripleo18:18
tchaypoand *that* seems to mean that it aborts before it writes /etc/os-collect-config.conf18:18
tchaypoSpamapS: reboot your seed, I dare you18:18
SpamapStchaypo: I did!18:18
SpamapSAnd some things didn't work18:18
SpamapShad to re-add eth0 dhcp18:19
*** pradeep has quit IRC18:19
SpamapSand then re-run o-c-c --force --one18:19
SpamapSnot much else though IIRC18:19
tchaypomaybe i should try that18:19
tchaypoon my seed18:19
SpamapSif we've done our job that should almost always produce a system state that we can count on.18:21
*** akrivoka has quit IRC18:22
*** yamahata has quit IRC18:23
tchaypo-A PREROUTING -d 169.254.169.254/32 -i br-ctlplane -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 877518:25
tchaypothat’s hp1 looking like it might be sorted..18:25
tchaypoand yea, verily, os-collect-config can now talk to 169.254.169.25418:26
tchaypohttps://www.irccloud.com/pastebin/TGaHPR9518:26
tchaypomuch less happy in hp218:26
*** jp_at_hp has quit IRC18:28
tchaypo…. it looks like it’s trying to hit the seed completion port.. but of course the seed was built a long time ago so there’s nothing listening on 192.168.122.1:2741018:29
tchaypo*headdesk*18:30
SpamapStchaypo: yeah I hit that, its ok18:31
SpamapStchaypo: that is the last bit18:31
tchaypoit looks like, when that part of building the seed was happening, it probably failed because nc is not installed18:31
SpamapStchaypo: we should fix that to be a one time only thing18:31
tchaypohttps://www.irccloud.com/pastebin/ZAGVef8f18:31
tchaypomayhap we should be installing nc?18:31
tchaypooh wait, I’m misreading - that message is coming from nc18:32
tchaypola la la la. never mind.18:32
tchaypowhat matters is that we now have nat working on hp2 as well18:32
tchaypoand all of *that* means that os-collect-config now gets the data and triggers os-refresh-config, but it stalls on the mysql issue18:33
SpamapStchaypo: whats the mysql issue?18:35
*** noslzzp has quit IRC18:37
*** bvandenh has joined #tripleo18:38
*** regebro has quit IRC18:38
*** noslzzp has joined #tripleo18:39
*** marun has quit IRC18:43
*** wuhg has quit IRC18:43
*** radez_g0n3 is now known as radez18:44
tchaypo" We are neither cluster initialiser or joiner. Refusing to bootstrap mysql cluster until role is known"18:46
*** Marga_ has quit IRC18:46
*** pradeep has joined #tripleo18:47
*** pradeep1 has quit IRC18:47
*** Marga_ has joined #tripleo18:48
*** marun has joined #tripleo18:48
tchaypomaybe the seed was broke when i tried to deploy the undercloud. maybe trying again with a working seed will help.18:49
*** blinky_ghost has joined #tripleo18:49
*** Marga_ has quit IRC18:51
SpamapStchaypo: entirely possible. :)18:53
bnemecrbrady: Okay, I merged https://review.openstack.org/#/c/123145/  Can you push a followup to make the no-metadata failures nonfatal?18:54
*** pcrews has quit IRC18:57
*** Marga_ has joined #tripleo18:57
*** pcrews has joined #tripleo18:57
rbradybnemec: As soon as it actually merges, I will push up the follow-up patch.18:57
bnemecrbrady: Great, thanks!18:58
*** Marga_ has quit IRC18:58
rbradybnemec: thank you for the additional testing efforts18:58
*** Marga_ has joined #tripleo18:59
*** liuxx has joined #tripleo19:00
*** Marga_ has quit IRC19:01
*** Marga_ has joined #tripleo19:01
*** pradeep1 has joined #tripleo19:03
*** marun has quit IRC19:03
*** marun_ has joined #tripleo19:03
*** pensu has quit IRC19:03
*** pradeep has quit IRC19:04
tchaypoadsfjkladfsjklfdsajkldfsajkdfsajklfsadjklfadsjkladsjkldfas19:05
openstackgerritMichael Tupitsyn proposed openstack/os-cloud-config: Grant admin role to admin user with default domain  https://review.openstack.org/13385719:06
tchayposo i have a heat stack, and it’s update-failed, so when i run devtest_undercloud it tries to do a stack-update19:06
tchaypowhich requires talking to the heat on the undercloud node… that isn’t up because of previous problems19:06
tchayposo i’m going to have to stack delete, yay19:06
*** pradeep has joined #tripleo19:07
*** pradeep1 has quit IRC19:08
*** pradeep1 has joined #tripleo19:11
*** marun_ has quit IRC19:11
*** marun_ has joined #tripleo19:12
SpamapStchaypo: why not resurrect the heat on the undercloud?19:12
*** dshulyak has joined #tripleo19:12
*** pradeep has quit IRC19:12
tchaypoheat never worked on the undercloud - this one had never worked since i built it19:14
tchaypoit hit the mysql issue and never started mysql so it could never set up anything that depended on mysql19:14
tchaypoif it was a previously-working undercloud that would have been a better choice19:14
*** pradeep has joined #tripleo19:16
*** marun has joined #tripleo19:16
*** pradeep1 has quit IRC19:18
*** liuxx has quit IRC19:18
*** marun_ has quit IRC19:19
*** marun has quit IRC19:22
*** dshulyak has quit IRC19:25
*** pradeep1 has joined #tripleo19:26
tchaypoprogress, now /etc/os-collect-config.conf has data19:26
tchayponew error19:26
*** pradeep has quit IRC19:26
tchaypothe yam parser doesn’t like /etc/os-net-config/neutron-openvswitch-agent.conf19:27
tchaypo*yaml19:27
*** julim has quit IRC19:33
*** marun has joined #tripleo19:37
*** rlandy has joined #tripleo19:37
*** marun_ has joined #tripleo19:42
*** marun has quit IRC19:44
*** avozza is now known as zz_avozza19:44
*** zz_avozza is now known as avozza19:45
*** jtomasek has joined #tripleo19:47
*** noslzzp has quit IRC19:50
*** pradeep has joined #tripleo19:51
*** marun_ has quit IRC19:51
*** pradeep1 has quit IRC19:52
*** marun_ has joined #tripleo19:53
*** noslzzp has joined #tripleo19:54
*** noslzzp has quit IRC19:58
*** spredzy has joined #tripleo19:58
*** noslzzp has joined #tripleo20:09
*** marun_ has quit IRC20:09
*** jprovazn_afk has quit IRC20:10
*** dshulyak has joined #tripleo20:13
*** pradeep1 has joined #tripleo20:13
*** pradeep has quit IRC20:15
*** Marga_ has quit IRC20:16
*** pradeep1 has quit IRC20:20
*** marun has joined #tripleo20:20
NgSpamapS: sorry, was afk. I've not seen issues SSHing into iLOs, but I have run into SSH issues with weird PDUs and suchlike, which ended up being odd crypto incompatibilities, fixed by hard-coding some crummy old algorithms in ssh_config20:21
SpamapSNg: never seent his before. It's not happening with putty from the terminal server so I think it is some weird crypto incompat20:24
openstackgerritMerged openstack/tripleo-heat-templates: Split out Nova software config  https://review.openstack.org/13030320:25
openstackgerritMerged openstack/diskimage-builder: Simplify Dracut cmdline script  https://review.openstack.org/13401220:26
* tchaypo hunts for the source of this horrid neutron-openvswitch-agent.conf20:26
*** blinky_ghost has quit IRC20:26
tchaypoit doesn’t seem to be in the os-net-config package; it doesn’t seem to be from the os-net-config element, nor the neutron-openvswitch-agent element20:26
NgSpamapS: I have no idea how to get PuTTY to be verbose enough to tell you which crypto algorithm it's using, but I'd hope it's possible. ssh in a TS session is no fun ;/20:30
SpamapSNg: I've given up ssh'ing to them and just using the TS session exclusively. :(20:30
Ngall that business about not being a borrower or a lender, they should have said not to be a sysadmin, because this is the kind of nonsense you end up dealing with all damn day20:30
tchaypofortunately ng you are now a manager20:31
tchayposo all you have to deal with is approvals for travel to summit20:32
tchaypowhich i’m sure is a much simpler, happier prospect20:32
* Ng sends tchaypo a memo20:32
tchaypothanks, I’ll pick it up from the sydney office next time I’m there20:32
rhalliseylarsks, what environment variables does horizon need?20:36
openstackgerritMerged openstack/tripleo-incubator: Revert "Encapsulate getting image for a deployment."  https://review.openstack.org/13564720:36
tchayposomehow google helps me more than grep20:37
tchaypohttp://git.openstack.org/cgit/openstack/tripleo-image-elements/tree/elements/neutron-openvswitch-agent/bin/init-neutron-ovs20:37
larsksrhallisey: You mean, in order to generate a valid local_settings file?20:37
*** dshulyak has quit IRC20:37
rhalliseyya20:38
*** julim has joined #tripleo20:38
larsksrhallisey: Sorry, still trying to make sure I understand the question...are you building a horizon image, or trying to consume one that someone else has built?20:39
*** julim has quit IRC20:39
rhalliseytrying to build the image, but I'm trying to understand what horizon needs in order to run20:40
larsksOkay.  So, you will certainly need the keystone service address in order to set OPENSTACK_KEYSTONE_URL.20:40
larsksI think that is pretty much it.20:40
larsksYou will probably want to set ALLOWED_HOSTS to ['*']20:41
*** julim has joined #tripleo20:41
larsksPossibly OPENSTACK_HOST should point to the same ip address used for OPENSTACK_KEYSTONE_URL.20:41
larsksThe documentation is a little unclear there.20:42
rhalliseyI'm struggling with it a little bit20:42
larsksBut looking through the config file, it looks like those should be the only things that need changing.20:42
larsksWhat sorts of problems have you encountered?20:45
*** jtomasek has quit IRC20:46
rhalliseynothing yet because I no longer have a testing environment20:48
larsksThat does make it difficult :)20:49
rhalliseyI just wanted to make sure I got scripts correct20:49
rhalliseyit really sucks so my plan was to make it look the best I can for both containers then try testing on a beaker machine tomorrow20:49
openstackgerritErik Colnick proposed openstack/tripleo-incubator: Enable Neutron DVR support in TripleO installation  https://review.openstack.org/13063020:50
rhalliseylarsks, I watched the summit presentation20:52
rhalliseylarsks, very packed and went pretty smooth20:53
larsksYeah, it was an overflowing crowd.  I watched by sticking my head in the door from the hallway.20:53
rhalliseyI thought it was really funny when he was looking for you20:54
*** dsneddon has joined #tripleo20:54
rhalliseyand you were outside20:54
rhallisey:)20:54
larsksI managed to sneak in at the end and have some good conversations with folks.20:55
rhalliseyI'm curious to hear what james thought20:55
rhalliseyhaven't really heard anything from him or the feedback he got20:55
larsksWell, we've all been pretty quiet post-summit :)20:56
rhalliseyyaaaa20:56
openstackgerritClint 'SpamapS' Byrum proposed openstack/tripleo-image-elements: Fix syntax error in deploy-ci-overcloud  https://review.openstack.org/13571621:00
*** dshulyak has joined #tripleo21:02
*** julim has quit IRC21:04
*** dshulyak has quit IRC21:07
*** julim has joined #tripleo21:07
*** noslzzp has quit IRC21:09
*** noslzzp has joined #tripleo21:11
*** shakamunyi_ has joined #tripleo21:11
rhalliseylarsks, can I still use crudini for setting things in local_settings?21:14
rhalliseylarsks, there don't seem to be sections21:15
larsksNope; crudini only works with .ini files. local_settings is a Python source file.21:15
larsksYou can use 'sed'.21:15
rhalliseyah makes sense21:15
rhalliseywill do21:15
* rhallisey goes back to hacking21:16
openstackgerrittherese-mchale proposed openstack/tripleo-image-elements: Disable save of iptables on package install  https://review.openstack.org/13572221:17
*** avozza is now known as zz_avozza21:20
*** zz_avozza is now known as avozza21:20
*** lucas-dinner has quit IRC21:26
openstackgerritJames Polley proposed openstack/tripleo-image-elements: Fix indentation of the vlan type  https://review.openstack.org/13572721:40
tchaypoSpamapS: ^^^21:42
tchayposuch fun21:42
tchaypodprince: it looks like the code I’m tweaking is yours, would you mind taking a look to see if I’m preserving the intent?21:42
SpamapStchaypo: doh21:43
SpamapSyaml can occasionally drive ya nuts. :)21:43
*** bvandenh has quit IRC21:49
*** penick has joined #tripleo21:50
dprincetchaypo: looking21:52
*** dshulyak has joined #tripleo21:54
*** tzumainn has quit IRC21:56
*** dshulyak has quit IRC21:57
tchaypoThanks21:58
*** shakamunyi_ has quit IRC21:59
*** untriaged-bot has joined #tripleo22:00
untriaged-botUntriaged bugs so far:22:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139121822:00
uvirtbotLaunchpad bug 1391218 in tripleo "Configuration Dependent on HAProxy" [Undecided,In progress]22:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138706122:00
uvirtbotLaunchpad bug 1387061 in tripleo "deploy under cloud failure due to pacemaker " [Undecided,New]22:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139364322:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139141222:00
uvirtbotLaunchpad bug 1393643 in tripleo "haproxy start failed loop with 'Starting proxy horizon: cannot bind socket'" [Undecided,New]22:00
uvirtbotLaunchpad bug 1391412 in tripleo "devtest  deploy overcloud successfully,but there have one baremetal in  Maintenance state" [Undecided,New]22:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/138748722:00
uvirtbotLaunchpad bug 1387487 in tripleo "tripleo-image-elements/elements/tuskar-ui /os-refresh-config /post-configure.d/101-tuskar-ui  needs authentication from Keystone" [Undecided,New]22:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139330422:00
untriaged-bothttps://bugs.launchpad.net/diskimage-builder/+bug/139165622:00
untriaged-bothttps://bugs.launchpad.net/tripleo/+bug/139329822:00
uvirtbotLaunchpad bug 1393304 in tripleo "create-nodes failure for customised pool" [Undecided,New]22:00
uvirtbotLaunchpad bug 1391656 in diskimage-builder "There is no way to customize the installation of the bootloader" [Undecided,New]22:00
*** untriaged-bot has quit IRC22:00
uvirtbotLaunchpad bug 1393298 in tripleo "keepalived VRRP_Script(chk_haproxy) timed out" [Undecided,In progress]22:00
SpamapShm need to do a triage run :-P22:02
SpamapSbeen spending too much time playing with real servers. :-P22:02
dprincetchaypo: commented, I think we want the vlan --type to be under the members: section for the OVS bridge.22:02
*** Marga_ has joined #tripleo22:02
*** Marga_ has quit IRC22:02
dprincetchaypo: so I think something else is the problem, perhaps 'members:' isn't getting printed out?22:03
*** Marga_ has joined #tripleo22:03
openstackgerritJeff Peeler proposed stackforge/kolla: Implement zaqar container  https://review.openstack.org/13573822:05
tchaypo In my case the vlan type was indented 4 spaces too far22:08
tchaypoSo it was22:08
tchaypoNested inside use_dhcp22:08
*** openstackgerrit has quit IRC22:10
*** openstackgerrit has joined #tripleo22:10
dprincetchaypo: okay, so use_dhcp for the address then. I see. Let me look again22:12
openstackgerritMerged stackforge/kolla: Add support for mongodb container  https://review.openstack.org/13461322:13
dprincetchaypo: so I think use_dhcp is at the right level. Perhaps what we need to do is just move the vlan interface above it like this: http://paste.openstack.org/show/134955/22:16
dprincetchaypo: that way it will fall directly under members: for the OVS bridge definition22:17
dprincetchaypo: honestly, this all just highlights the reason we need to move towards this https://review.openstack.org/#/c/130624/5/net-config-bridge.yaml,cm22:17
tchaypo I'lol have a play tomorrow and make sure the script is generating the right format22:18
tchaypoThanks22:18
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Disk space pre-flight check using roles  https://review.openstack.org/13574622:26
*** jdob has quit IRC22:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Removed duplicate tasks  https://review.openstack.org/13574722:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Document preserve ephemeral  https://review.openstack.org/13574822:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: RabbitMQ conditional fix  https://review.openstack.org/13574922:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Add tag to shutdown cloud  https://review.openstack.org/13575022:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: wait for cloud-init to finish  https://review.openstack.org/13575122:26
openstackgerritJulia Kreger proposed stackforge/tripleo-ansible: Minor conditional fix for disk space check  https://review.openstack.org/13575222:26
*** cwolferh has quit IRC22:26
*** radez is now known as radez_g0n322:27
*** dprince has quit IRC22:28
*** marun has quit IRC22:29
SpamapSMar 22 01:26:40 ci-overcloud-controller0-brg6gydhsvwa os-collect-config: Line 4: "options = NO_SSLv2 NO_SSLv3": Illegal SSL option22:34
SpamapShmmm22:34
openstackgerritMerged openstack/diskimage-builder: Enable RHEL Registration  https://review.openstack.org/12314522:34
SpamapSanybody seen that?22:34
*** weshay has quit IRC22:38
lifelessSpamapS: I haven't, but possibly Python has dropped v3 ssl support entirely or something ?22:40
openstackgerritRyan Brady proposed openstack/diskimage-builder: Update RHEL Registration  https://review.openstack.org/13575722:42
*** jistr|mtg has quit IRC22:42
*** marun has joined #tripleo22:42
SpamapSlifeless: that is stunnel22:42
SpamapSlifeless: and I think it may be OpenSSL dropped it entirely.22:42
SpamapStho man pages have not been updated just yet22:43
SpamapSand that would be.. an odd backward imcompatibility22:43
SpamapS  * SECURITY UPDATE: fix the no-ssl3 build option22:44
SpamapS    - debian/patches/CVE-2014-3568.patch: fix conditional code in22:44
SpamapS      ssl/s23_clnt.c, ssl/s23_srvr.c.22:44
SpamapS    - CVE-2014-356822:44
uvirtbotSpamapS: OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568)22:44
uvirtbotSpamapS: OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3568)22:44
SpamapSso whats possible is that it was always being built with no-ssl3 but still had SSLv322:45
* SpamapS goes to whine in #ubuntu-security22:45
SpamapS14:45 ... kick!#ubuntu-security -> SpamapS(Invite only channel) by ChanServ22:46
SpamapSor.. not22:46
TheJuliaum... wow22:46
lifelessSpamapS: ouch! try -server?22:47
SpamapS-hardened22:47
*** marun_ has joined #tripleo22:49
*** marun has quit IRC22:50
*** rushiagr_away has quit IRC22:54
openstackgerritRyan Brady proposed openstack/diskimage-builder: Update RHEL Registration  https://review.openstack.org/13575722:57
*** rushiagr_away has joined #tripleo22:57
SpamapShrm, doesn't work with older libssl anyway23:02
*** chlong has joined #tripleo23:02
*** avozza is now known as zz_avozza23:05
openstackgerritRyan Brady proposed openstack/diskimage-builder: Update RHEL Registration  https://review.openstack.org/13575723:05
*** zz_avozza is now known as avozza23:08
greghayneswow, so dib hadnt been released in a while23:09
* greghaynes hopes all the things dont break now that I just cut a release23:09
*** rlandy has quit IRC23:11
clarkbgl23:13
openstackgerritRyan Hallisey proposed stackforge/kolla: Horizon container implementation  https://review.openstack.org/13577323:14
*** vinsh has quit IRC23:14
*** vinsh has joined #tripleo23:15
openstackgerritRyan Hallisey proposed stackforge/kolla: Horizon container implementation  https://review.openstack.org/13577323:16
*** avozza is now known as zz_avozza23:17
*** zz_avozza is now known as avozza23:18
*** dsneddon has quit IRC23:19
*** dsneddon has joined #tripleo23:20
*** rhallisey has quit IRC23:21
*** marun_ has quit IRC23:34
*** julim has quit IRC23:39
*** dsneddon has quit IRC23:40
*** dsneddon has joined #tripleo23:41
*** athomas has quit IRC23:44
*** noslzzp has quit IRC23:46
*** ccrouch has quit IRC23:47
*** morazi has quit IRC23:48
SpamapShm do we just not test openssl in our CI? Maybe thats how this stunnel issue made it through?23:57
SpamapShm no it is in the default23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!