| opendevreview | Alan Bishop proposed openstack/tripleo-heat-templates master: Ensure the internal glance-api service is deployed https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866075 | 00:06 |
|---|---|---|
| opendevreview | Merged openstack/tripleo-validations stable/zed: Fix ansible 2.14 incompatibility https://review.opendev.org/c/openstack/tripleo-validations/+/865958 | 00:55 |
| opendevreview | Merged openstack/tripleo-common stable/wallaby: Fix token cache expires_at check https://review.opendev.org/c/openstack/tripleo-common/+/865247 | 00:55 |
| opendevreview | Merged openstack/tripleo-heat-templates master: OpendaylightApiNetwork is no longer used https://review.opendev.org/c/openstack/tripleo-heat-templates/+/852440 | 00:55 |
| opendevreview | Merged openstack/tripleo-heat-templates master: Remove reference to Contrail https://review.opendev.org/c/openstack/tripleo-heat-templates/+/852441 | 00:55 |
| opendevreview | Merged openstack/tripleo-heat-templates master: Removing NIC scripts as the heat network config is no longer supported https://review.opendev.org/c/openstack/tripleo-heat-templates/+/860691 | 00:56 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: Refactor generation of tripleo_nova_libvirt_guests https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865962 | 02:17 |
| opendevreview | Takashi Kajinami proposed openstack/tripleo-heat-templates master: Refactor generation of tripleo_nova_libvirt_guests https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865962 | 02:34 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-heat-templates master: Add node_ips hiera for GlanceApiInternal https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866099 | 04:19 |
| *** pojadhav|out is now known as pojadhav|ruck | 04:23 | |
| *** yadnesh|away is now known as yadnesh | 04:31 | |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: Use same hosts for glance api endpoints https://review.opendev.org/c/openstack/puppet-tripleo/+/866100 | 04:48 |
| opendevreview | Takashi Kajinami proposed openstack/puppet-tripleo master: Use same hosts for glance api backends https://review.opendev.org/c/openstack/puppet-tripleo/+/866100 | 04:49 |
| *** khomesh|away is now known as khomesh | 05:01 | |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: overcloud image upload: Drop support for glance https://review.opendev.org/c/openstack/python-tripleoclient/+/864012 | 05:26 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: overcloud image upload: Drop support for glance https://review.opendev.org/c/openstack/python-tripleoclient/+/864012 | 05:40 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible master: Increase ansible-galaxy install timeout to 300s https://review.opendev.org/c/openstack/tripleo-ansible/+/866105 | 06:25 |
| opendevreview | Luca Miccini proposed openstack/tripleo-heat-templates master: Allow overriding mysql_bundle::gcomm_cipher https://review.opendev.org/c/openstack/tripleo-heat-templates/+/861573 | 06:29 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible master: Increase ansible-galaxy install timeout to 300s https://review.opendev.org/c/openstack/tripleo-ansible/+/866105 | 06:43 |
| opendevreview | Takashi Kajinami proposed openstack/python-tripleoclient master: overcloud image upload: Drop support for glance https://review.opendev.org/c/openstack/python-tripleoclient/+/864012 | 06:53 |
| *** frenzy_friday|rover is now known as frenzy_friday|rover|doc | 06:56 | |
| *** yadnesh is now known as yadnesh|afk | 07:50 | |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-ansible master: Configure ansible-galaxy to use caching proxies https://review.opendev.org/c/openstack/tripleo-ansible/+/866031 | 08:05 |
| *** frenzy_friday|rover|doc is now known as frenzy_friday|rover | 08:17 | |
| *** jpena|off is now known as jpena | 08:25 | |
| *** amoralej|off is now known as amoralej | 08:27 | |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible master: Increase ansible-galaxy install timeout to 300s https://review.opendev.org/c/openstack/tripleo-ansible/+/866105 | 08:28 |
| *** yadnesh|afk is now known as yadnesh | 08:41 | |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Drop ansible-core pin from requirements https://review.opendev.org/c/openstack/tripleo-ansible/+/865620 | 08:50 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Use uc for tox py* targets https://review.opendev.org/c/openstack/tripleo-ansible/+/865560 | 08:50 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible master: Increase ansible-galaxy install timeout to 300s https://review.opendev.org/c/openstack/tripleo-ansible/+/866105 | 09:00 |
| opendevreview | Merged openstack/tripleo-heat-templates stable/wallaby: Fix tripleo_delegate_to parameter in heat-engine https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865400 | 09:00 |
| opendevreview | Merged openstack/tripleo-ansible stable/train: Move inventory filters to tripleo-upgrade https://review.opendev.org/c/openstack/tripleo-ansible/+/866010 | 09:00 |
| opendevreview | Merged openstack/os-net-config master: Updates to tox and setup.cfg files https://review.opendev.org/c/openstack/os-net-config/+/864996 | 09:00 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Drop ansible-core pin from requirements https://review.opendev.org/c/openstack/tripleo-ansible/+/865620 | 09:03 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Use uc for tox py* targets https://review.opendev.org/c/openstack/tripleo-ansible/+/865560 | 09:03 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Drop ansible-core pin from requirements https://review.opendev.org/c/openstack/tripleo-ansible/+/865620 | 09:48 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Use uc for tox py* targets https://review.opendev.org/c/openstack/tripleo-ansible/+/865560 | 09:48 |
| opendevreview | Vijayalakshmi proposed openstack/os-net-config stable/wallaby: zuul: Declare queue at top level https://review.opendev.org/c/openstack/os-net-config/+/866121 | 09:58 |
| opendevreview | Vijayalakshmi proposed openstack/os-net-config stable/wallaby: Updating Zuul CI jobs for os-net-config repo https://review.opendev.org/c/openstack/os-net-config/+/866122 | 10:00 |
| opendevreview | Vijayalakshmi proposed openstack/os-net-config stable/wallaby: Updates to tox and setup.cfg files https://review.opendev.org/c/openstack/os-net-config/+/866128 | 10:12 |
| opendevreview | Vijayalakshmi proposed openstack/os-net-config stable/wallaby: Mellanox NICs' ifcfg-scripts should not be removed when no CONFIG change exists https://review.opendev.org/c/openstack/os-net-config/+/866129 | 10:14 |
| opendevreview | Sofer Athlan-Guyot proposed openstack/tripleo-quickstart master: Add featureset068 for multi-rhel update. https://review.opendev.org/c/openstack/tripleo-quickstart/+/866131 | 10:17 |
| opendevreview | Sofer Athlan-Guyot proposed openstack/tripleo-ci master: Add a multi-rhel update job. https://review.opendev.org/c/openstack/tripleo-ci/+/865851 | 10:21 |
| opendevreview | Sofer Athlan-Guyot proposed openstack/tripleo-ci master: Add a multi-rhel update job. https://review.opendev.org/c/openstack/tripleo-ci/+/865851 | 10:21 |
| opendevreview | Sofer Athlan-Guyot proposed openstack/tripleo-upgrade stable/wallaby: [DNM] Testing a multi-rhel job. https://review.opendev.org/c/openstack/tripleo-upgrade/+/865854 | 10:24 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-ansible master: Configure ansible-galaxy to use caching proxies https://review.opendev.org/c/openstack/tripleo-ansible/+/866031 | 10:26 |
| shyamb | Hi, I am executing an ansible task from undercloud node to all controller nodes as ansible hosts | 10:42 |
| shyamb | I am getting error about 'step' variable. | 10:42 |
| shyamb | how to set this puppet variable for testing? | 10:43 |
| shyamb | Here is my ansible playbook: https://paste.openstack.org/show/bahvEpHuA5Xs5i731VeN/ | 10:43 |
| shyamb | Error message: Error: Function lookup() did not find a value for the name 'step | 10:44 |
| *** dviroel_ is now known as dviroel | 10:47 | |
| Tengu | shyamb: the tripleo_ha_wrapper role probably want to have a "step" var, and it's not set in your playbook? | 10:50 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Drop ansible-core pin from requirements https://review.opendev.org/c/openstack/tripleo-ansible/+/865620 | 10:51 |
| opendevreview | Rabi Mishra proposed openstack/tripleo-ansible stable/zed: Use uc for tox py* targets https://review.opendev.org/c/openstack/tripleo-ansible/+/865560 | 10:51 |
| shyamb | Tengu: Okay. | 10:56 |
| shyamb | Tengu: I think puppet code is complaining. Here is complete ansible output: https://paste.openstack.org/show/b7TvFeJYVzGLOj8U3kM2/ | 10:57 |
| shyamb | My ansible playbook is calling a puppet module | 10:57 |
| shyamb | I can see that call is happening | 10:57 |
| Tengu | probably from ::tripleo::profile::base::pacemaker | 10:58 |
| Tengu | https://opendev.org/openstack/puppet-tripleo/src/branch/master/manifests/profile/base/pacemaker.pp#L101 | 10:59 |
| Tengu | shyamb: there are checks on the $step value, so you'd better ensure what actions you want to run, and pass the correct value. | 10:59 |
| Tengu | hmmm, now, the warning about hiera being deprecated is showing you're not using master - you probably want to check for the correct version of that class. | 11:00 |
| Tengu | still - you get the idea here. | 11:00 |
| shyamb | If I execute the same puppet apply command directly on the controller node, it's working. | 11:01 |
| shyamb | but if I call it through ansible playbook, it's failing for 'step' variable. | 11:02 |
| *** rlandy|out is now known as rlandy | 11:14 | |
| yuval | Hey, is there an "easy" way to deploy the overcloud using ansible files the director accept? | 11:26 |
| yuval | I am really struggling with all the heat conf files | 11:26 |
| yuval | if anyway one is available to few small questions I will really appreciate this | 11:29 |
| opendevreview | Fernando Díaz Bravo proposed openstack/tripleo-ansible master: Only do snapshot on inactive nodes https://review.opendev.org/c/openstack/tripleo-ansible/+/862795 | 11:32 |
| ramishra | yuval: Hey! Though I'm not sure what excatly you're trying, you can start with standalone deployment and then go from there... | 11:42 |
| ramishra | https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/deployment/standalone.html can help you with the steps | 11:42 |
| yuval | Hey ramishra, In general I am working on certifying my driver for redhat openstack platform | 11:44 |
| yuval | I was able to create the standalone deployment | 11:44 |
| yuval | but I dont understand how to move from the standalone to the cluster | 11:44 |
| ramishra | yuval: you probably should look for help downstream with partner support | 11:45 |
| ramishra | for your driver integration/certification with TH | 11:45 |
| ramishra | *RH | 11:45 |
| yuval | I see Thanks | 11:45 |
| opendevreview | Lukas Bezdicka proposed openstack/tripleo-upgrade stable/wallaby: [ffwd3] Introduce roles_data adjustment for wallaby https://review.opendev.org/c/openstack/tripleo-upgrade/+/866141 | 11:55 |
| opendevreview | Lukas Bezdicka proposed openstack/tripleo-upgrade stable/wallaby: Removed tasks using unsupported NIC config script https://review.opendev.org/c/openstack/tripleo-upgrade/+/866142 | 12:17 |
| opendevreview | Fernando Díaz Bravo proposed openstack/tripleo-ansible master: Only do snapshot on inactive nodes https://review.opendev.org/c/openstack/tripleo-ansible/+/862795 | 12:17 |
| opendevreview | Merged openstack/tripleo-ansible stable/zed: Don't use meta:end_play after growvols check https://review.opendev.org/c/openstack/tripleo-ansible/+/865727 | 12:22 |
| opendevreview | Jesse Pretorius proposed openstack/tripleo-heat-templates stable/wallaby: Removing NIC scripts as the heat network config is no longer supported https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866147 | 12:24 |
| opendevreview | Jesse Pretorius proposed openstack/tripleo-upgrade master: Remove mirror option as it's unused https://review.opendev.org/c/openstack/tripleo-upgrade/+/865698 | 12:25 |
| opendevreview | Bogdan Dobrelya proposed openstack/tripleo-ansible master: New tripleo_nova role https://review.opendev.org/c/openstack/tripleo-ansible/+/866148 | 12:26 |
| opendevreview | Fernando Díaz Bravo proposed openstack/tripleo-ansible master: Only do snapshot on inactive nodes https://review.opendev.org/c/openstack/tripleo-ansible/+/862795 | 12:35 |
| *** ysandeep is now known as ysandeep|PTO | 12:38 | |
| *** dasm|off is now known as dasm | 12:43 | |
| opendevreview | Fernando Díaz Bravo proposed openstack/tripleo-ansible master: Only do snapshot on inactive nodes https://review.opendev.org/c/openstack/tripleo-ansible/+/862795 | 12:48 |
| *** frenzy_friday|rover is now known as frenzy_friday|rover|lunch | 12:58 | |
| rlandy | jpich: hello ... we will need your help with selinux issue | 13:00 |
| rlandy | Tengu pointed to https://paste.openstack.org/show/b0Hoo1zA4CBoLD0jqT8m/ as the real error here | 13:01 |
| rlandy | frenzy_friday|rover|lunch: ^^ | 13:01 |
| rlandy | from example error logs: https://logserver.rdoproject.org/19/36719/22/check/periodic-tripleo-ci-centos-9-scenario001-standalone-common-master/9576761/logs/undercloud/home/zuul/standalone_deploy.log.txt.gz | 13:01 |
| *** yadnesh is now known as yadnesh|afk | 13:02 | |
| Tengu | note that thanks to CI being permissive, the `rpm -V openstack-selinux' doesn't raise any error... | 13:02 |
| Tengu | namely: https://paste.openstack.org/show/bY3mdTr5OBqIu2B3yggs/ | 13:02 |
| Tengu | and this is pretty annoying, right? | 13:02 |
| *** amoralej is now known as amoralej|lunch | 13:09 | |
| jpich | rlandy, Tengu: Have you been able to check if container-selinux is installed properly? | 13:10 |
| Tengu | jpich: they don't provide the -V thing. and seeing the error, I'm not sure it's related to the container-selinux package? | 13:10 |
| Tengu | more like openstack related, since it's missing os_nova_use_execmem | 13:11 |
| Tengu | but I can reinstall. | 13:11 |
| Tengu | uho. | 13:11 |
| Tengu | Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1219 | 13:11 |
| jpich | That's the first boolean to be enabled, that just means openstack-selinux didn't install properly | 13:11 |
| Tengu | jpich: what's the thing about the cil file already? | 13:12 |
| jpich | and if container-selinux didn't install... it's probably one of the container symbol that didn't resolve | 13:12 |
| Tengu | container-selinux failed to install, yeah. | 13:13 |
| jpich | I think I have some notes on how to recreate a cil file to check what symbol it's failing on, let me dig them out... if it's container-selinux it's out of our hands though | 13:13 |
| Tengu | but I don't remember how to inspect the cil thingy. | 13:13 |
| jpich | Tengu: here http://selinuxproject.org/page/ConfigurationFiles#Converting_policy_packages_to_CIL | 13:13 |
| Tengu | hmmm we want to output CIL to human readable thing | 13:14 |
| Tengu | jpich: want an access on the node? | 13:15 |
| opendevreview | Lukas Bezdicka proposed openstack/tripleo-heat-templates stable/train: Remove the python3-openclient and add a new task. https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866006 | 13:15 |
| jpich | Tengu: If you send me the pp file you're testing with (or I guess the container-selinux version, should be in there I think?) I should be able to do that locally. But that command will help you, I think the problem is that the cil files don't get saved so you can't look inside, but once you have the file it's just text | 13:16 |
| opendevreview | dasm proposed openstack/tripleo-heat-templates stable/zed: OSP-19547: Switch upgrade job to use Zed branch https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865052 | 13:16 |
| Tengu | dang, wait, CIL is bz2 | 13:16 |
| Tengu | 2s. | 13:16 |
| Tengu | bunzip2 and that's it. stupid me. | 13:17 |
| Tengu | jpich: (allow container_domain init_t (bridge_socket (ioctl read write getattr lock append accept getopt))) | 13:17 |
| Tengu | (sorry, have to shift focus for the next 20 minutes or so) | 13:18 |
| jpich | betcha bridge_socket or something is a new type or something *pokes around* | 13:18 |
| fultonj | bogdando: Would you mind reviewing https://review.opendev.org/c/openstack/puppet-tripleo/+/865884 ? It's a cherry pick of a patch you +2'd recently. | 13:21 |
| fultonj | same for https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865885 | 13:22 |
| fultonj | I already +2'd them but technically they are not clean cherry picks so I didn't +w them | 13:23 |
| jpich | Tengu: What's the container-selinux version? bridge_socket was removed from upstream https://github.com/fedora-selinux/selinux-policy/commit/ca313456bbb8f079aa3bb57e94eead1222b9f964 . I'm not seeing it in master for container-selinux, though... | 13:26 |
| Tengu | jpich: container-selinux-2.191.0-1.el9.noarch | 13:26 |
| Tengu | fun.... | 13:30 |
| jpich | I'm guessing it comes from "allow container_domain init_t:socket_class_set" expanding socket_class_set wrongly, but the upstream patch did remove it from socket_class_set as well... | 13:30 |
| Tengu | yeah, I was wondering if some macro may fail. | 13:30 |
| jpich | I'd file a bug against container-selinux, though I wouldn't be surprised if it's due to a temporary selinux packages mismatch somewhere... | 13:30 |
| Tengu | jpich: guess for CI the best WA would be to downgrade selinux-policy? | 13:31 |
| * Tengu testing | 13:31 | |
| Tengu | since I have a node to break. | 13:32 |
| *** yadnesh|afk is now known as yadnesh | 13:32 | |
| jpich | maybe yeah, if you can pinpoint which of those packages changed | 13:32 |
| Tengu | bingo. rlandy, frenzy_friday|rover|lunch `dnf downgrade -y openstack-selinux' allows to (re)install container-selinux and openstack-selinux without any error. | 13:33 |
| Tengu | jpich: I'll submit a patch against the local_settings.sh in order to make it run even if selinux is disabled. | 13:34 |
| Tengu | or "permissive", sorry. | 13:34 |
| Tengu | that way, the validation will fail as it should, even on CI with its permissive setting. | 13:34 |
| opendevreview | Bogdan Dobrelya proposed openstack/tripleo-ansible master: Provide a fallback value for httpd wsgi workers https://review.opendev.org/c/openstack/tripleo-ansible/+/866163 | 13:34 |
| jpich | All right | 13:34 |
| rlandy | Tengu: any fix needed from our side? | 13:34 |
| rlandy | we should add the downgrade statement? | 13:35 |
| Tengu | rlandy: for now, the workaround is to downgrade selinux-policy package, yes | 13:36 |
| rlandy | k- we'll need to check the right version to downgrade to | 13:37 |
| rlandy | frenzy_friday|rover|lunch: ^^ | 13:37 |
| Tengu | jpich: guess I'm to open the bug against container-selinux? | 13:37 |
| opendevreview | Bogdan Dobrelya proposed openstack/tripleo-ansible master: Provide a fallback value for httpd wsgi workers https://review.opendev.org/c/openstack/tripleo-ansible/+/866163 | 13:37 |
| rlandy | we'll need a LP bug as well | 13:37 |
| Tengu | rlandy: selinux-policy noarch 34.1.47-1.el9 | 13:37 |
| Tengu | selinux-policy-targeted noarch 34.1.47-1.el9 | 13:37 |
| Tengu | rlandy: there are 2 packages in the downgrade - those are the target version | 13:37 |
| rlandy | Tengu: ^^ that was the last safe one? | 13:37 |
| Tengu | yep | 13:37 |
| rlandy | great | 13:37 |
| Tengu | with that version, it works© | 13:37 |
| rlandy | frenzy_friday|rover|lunch: going in meeting - can you add that patch pls | 13:38 |
| jpich | Tengu: Yeah, I'd include the result of rpm -qa | grep selinux in the bug as well | 13:38 |
| rlandy | marios: pojadhav|ruck: ^^ fyi | 13:38 |
| Tengu | rlandy: may I let you open the LP (or your team) - I'll open a bug against container-selinux | 13:38 |
| Tengu | jpich: yep. against their github right? | 13:38 |
| rlandy | Tengu: ack ruck/rovers will deal with it | 13:38 |
| jpich | Good starting point, yeah! | 13:38 |
| Tengu | jpich: in the meantime: https://github.com/redhat-openstack/openstack-selinux/pull/102 | 13:38 |
| pojadhav|ruck | rlandy, ack | 13:39 |
| *** pojadhav|ruck is now known as pojadhav|dr_appt | 13:41 | |
| Tengu | hmm. I'll do some more testing in a VM. I have something fun. | 13:42 |
| opendevreview | John Fulton proposed openstack/tripleo-heat-templates master: Remove CephHciOsdType and CephHciOsdCount parameters https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866164 | 13:45 |
| opendevreview | Alan Bishop proposed openstack/tripleo-heat-templates master: Fix GlanceApiInternal network definition https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866165 | 13:45 |
| Tengu | rlandy: fun. gimme a minute or 2 to assess something. | 13:48 |
| Tengu | should have checked the selinux-policy version. | 13:49 |
| *** frenzy_friday|rover|lunch is now known as frenzy_friday|rover | 13:50 | |
| Tengu | frenzy_friday|rover: you can drop the hold. | 13:52 |
| Tengu | though.... I'm unable to reproduce on a fresh cs9 here. | 13:52 |
| Tengu | wondering if it wasn't a glitch. | 13:52 |
| frenzy_friday|rover | Tengu, ack, removing the hold | 13:55 |
| frenzy_friday|rover | rlandy, downgrading the selinux-policy - that is in the releasefile right? | 13:56 |
| Tengu | frenzy_friday|rover: in fact, downgrading re-install the same version. I checked further, and that's the already-installed version. As if it wasn't properly installed or something. | 13:57 |
| Tengu | can't reproduce the issue on that node, nor locally, with the same repositories | 13:58 |
| Tengu | frenzy_friday|rover: would be good to check for the next runs if the issue still happens. looks like a glitch. | 13:58 |
| frenzy_friday|rover | aye, lemme rerun | 13:58 |
| opendevreview | Karthik S proposed openstack/os-net-config master: WIP: Add nmstate provider support https://review.opendev.org/c/openstack/os-net-config/+/859552 | 14:13 |
| rlandy | frenzy_friday|rover: sorry - meetings .. reading back ... this is still an issue, right? | 14:20 |
| rlandy | yeah - you'd need to downgrade on the release file | 14:20 |
| rlandy | if it's installed before, it should only hit on the containers - hopefully | 14:21 |
| frenzy_friday|rover | rlandy, rerunning the standalone components to check if this was a glitch - Tengu didnt face the issue on a fresh c9 vm | 14:21 |
| Tengu | frenzy_friday|rover: lemme know the outcome | 14:22 |
| *** amoralej|lunch is now known as amoralej | 14:23 | |
| opendevreview | Merged openstack/tripleo-common stable/wallaby: Define container image used by GlanceApiInternal service https://review.opendev.org/c/openstack/tripleo-common/+/865883 | 14:28 |
| *** yadnesh is now known as yadnesh|away | 14:59 | |
| opendevreview | Bogdan Dobrelya proposed openstack/tripleo-heat-templates master: Convert Nova httpd configurations to new role https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866177 | 15:08 |
| Tengu | jpich: ok, so the selinux thing: selinux-policy as present on the VM is 38.1.1-1.el9 - if we downgrade it, we end with the 34.1.47-1.el9. | 15:16 |
| Tengu | jpich: now that I have that version, I can open a bug against container-selinux. | 15:16 |
| *** dviroel is now known as dviroel|lunch | 15:17 | |
| Tengu | jpich, frenzy_friday|rover, rlandy : https://github.com/containers/container-selinux/issues/198 fyi | 15:21 |
| Tengu | we'll see how it goes. | 15:21 |
| rlandy | frenzy_friday|rover: do we have a tracking bug yet in LP? | 15:21 |
| rlandy | if we are still seeing failures | 15:21 |
| frenzy_friday|rover | rlandy, should I reopen https://bugs.launchpad.net/tripleo/+bug/1977873 or create a new one? | 15:22 |
| rlandy | frenzy_friday|rover: new one pls | 15:22 |
| frenzy_friday|rover | cool | 15:22 |
| rlandy | with the links Tengu is mentioning above | 15:22 |
| rlandy | and the downgrade patch | 15:22 |
| Tengu | new one indeed | 15:22 |
| rlandy | when you have ir | 15:22 |
| rlandy | it | 15:22 |
| frenzy_friday|rover | yep, on it | 15:22 |
| opendevreview | Chris Sibbitt proposed openstack/tripleo-ansible master: Fix molecule failures in tripleo_collectd https://review.opendev.org/c/openstack/tripleo-ansible/+/865465 | 15:23 |
| rlandy | thanks | 15:23 |
| frenzy_friday|rover | https://bugs.launchpad.net/tripleo/+bug/1998348 . Creating a patch to downgrade selinux-policy now | 15:31 |
| opendevreview | Bogdan Dobrelya proposed openstack/tripleo-heat-templates stable/zed: Fix logs permissions for swtpm https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866015 | 15:39 |
| Tengu | thanks jpich for the approval :) | 15:45 |
| jpich | Tengu: Np. I'd be more comfortable if Lon reviews as well as he's more familiar with that script. I'll keep an eye on the container-selinux bug too! | 15:47 |
| Tengu | jpich: sure :) | 15:55 |
| opendevreview | Cedric Jeanneret proposed openstack/tripleo-ansible master: Configure ansible-galaxy to use caching proxies https://review.opendev.org/c/openstack/tripleo-ansible/+/866031 | 16:04 |
| Tengu | slagle: heya! care to nudge https://review.opendev.org/c/openstack/tripleo-ansible/+/863872 ? It would be nice to see it in, so that we can work on the actual integration in the standalone roles. | 16:08 |
| opendevreview | Ananya proposed openstack/tripleo-quickstart master: Downgrade selinux-policy https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 16:16 |
| frenzy_friday|rover | rlandy, downgrade like this ^ ? | 16:16 |
| rlandy | frenzy_friday|rover: ack - but we need to downgrade to a particular version Tengu pointed to | 16:18 |
| rlandy | 34.1.47-1.el9 | 16:18 |
| rlandy | also we need to check if this is component only or also integration line | 16:18 |
| frenzy_friday|rover | yeah, sorry some typos on the patch | 16:18 |
| frenzy_friday|rover | fixing | 16:18 |
| Tengu | rlandy: that's the version you land with "dnf downgrade -y selinux-policy" | 16:18 |
| rlandy | hmmm | 16:19 |
| rlandy | zed line looks to be impacted as well | 16:19 |
| rlandy | so we'd need the integration release files | 16:19 |
| rlandy | Tengu: ack - until there is an even newer version | 16:19 |
| *** dviroel|lunch is now known as dviroel | 16:19 | |
| opendevreview | Ananya proposed openstack/tripleo-quickstart master: Downgrade selinux-policy https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 16:19 |
| rlandy | Tengu: if we are not specific, we will land up with the bad verion after downgrade | 16:19 |
| rlandy | happened to us before | 16:20 |
| Tengu | :( ok | 16:20 |
| opendevreview | Ananya proposed openstack/tripleo-quickstart master: Downgrade selinux-policy to 34.1.47-1.el9 https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 16:22 |
| frenzy_friday|rover | rlandy, ack, updated. Lemme check if we are seeing this in the integration lines as well. probably not | 16:22 |
| rlandy | frenzy_friday|rover: zed line looks pretty red | 16:24 |
| frenzy_friday|rover | fs64 | 16:24 |
| frenzy_friday|rover | the standalones are red due to the selinux thing and fs64 is red due to 1998211 | 16:25 |
| *** pojadhav|dr_appt is now known as pojadhav|out | 16:27 | |
| *** marios is now known as marios|out | 16:27 | |
| * frenzy_friday|rover checks gate - looks red | 16:27 | |
| opendevreview | dasm proposed openstack/tripleo-ci master: OSP-19547: Add Zed update and upgrade jobs https://review.opendev.org/c/openstack/tripleo-ci/+/865050 | 16:30 |
| opendevreview | dasm proposed openstack/tripleo-heat-templates stable/zed: OSP-19547: Switch upgrade job to use Zed branch https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865052 | 16:31 |
| opendevreview | dasm proposed openstack/tripleo-ci master: OSP-19547: Add Zed update and upgrade jobs https://review.opendev.org/c/openstack/tripleo-ci/+/865050 | 16:33 |
| *** jpena is now known as jpena|off | 17:05 | |
| opendevreview | Fernando Díaz Bravo proposed openstack/tripleo-ansible master: Only do snapshot on inactive nodes https://review.opendev.org/c/openstack/tripleo-ansible/+/862795 | 17:21 |
| slagle | frenzy_friday|rover: Tengu : fyi, i had to downgrade container-selinux to get around that issue, not selinux-policy | 17:31 |
| *** amoralej is now known as amoralej|off | 17:34 | |
| rlandy | slagle: comparing passing and failing jobs: https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-standalone-master/7fc0acd/logs/undercloud/var/log/extra/package-list-installed.txt.gz and https://logserver.rdoproject.org/openstack-periodic-integration-main/opendev.org/openstack/tripleo-ci/master/periodic-tripleo-ci-centos-9-standalone-master/6b56c5a | 17:42 |
| rlandy | /logs/undercloud/var/log/extra/package-list-installed.txt.gz - they both have the same version of container-selinux.noarch 3:2.191.0-1.el9 @appstream | 17:42 |
| rlandy | what version did you downgrade to? | 17:42 |
| Tengu | slagle: fun.. selinuxpolicy downgrade sorted things out on the holded node | 17:43 |
| rlandy | selinux-policy is different though 34.1.47-1.el9 vs selinux-policy.noarch 38.1.1-1.el9 | 17:43 |
| slagle | rlandy: container-selinux-2.191.0-1.el9.noarch | 17:45 |
| slagle | and I have selinux-policy-34.1.47-1.el9.noarch | 17:45 |
| slagle | maybe have to downgrade both? | 17:45 |
| rlandy | watching https://review.rdoproject.org/r/c/testproject/+/46304 to see if it is helps | 17:45 |
| rlandy | although we may need a container rebuild | 17:45 |
| slagle | i dunno, i hit the exact error | 17:45 |
| rlandy | we'll confirm on the testproject | 17:46 |
| opendevreview | Merged openstack/puppet-tripleo stable/wallaby: Support deploying additional internal glance-api service https://review.opendev.org/c/openstack/puppet-tripleo/+/865884 | 17:53 |
| opendevreview | Chris Sibbitt proposed openstack/tripleo-ansible stable/zed: Fix molecule failures in tripleo_collectd https://review.opendev.org/c/openstack/tripleo-ansible/+/865888 | 17:55 |
| csibbitt | tkajinam, I think that https://review.opendev.org/c/openstack/tripleo-ansible/+/865465 is 100% ready to go now. I have fixed the problems and shortened the runtime considerably. | 17:56 |
| csibbitt | The backport to Zed is hopefully ready to go too; but I'll watch it for problems. I know that this was failing on wallaby at very least, so I'm trying to get back to that ASAP | 17:56 |
| opendevreview | Ananya proposed openstack/tripleo-quickstart master: Downgrade container-selinux https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 18:14 |
| frenzy_friday|rover | https://review.rdoproject.org/r/c/testproject/+/46304 failed. I rechecked with container-selinux | 18:16 |
| opendevreview | Ananya proposed openstack/tripleo-quickstart master: Downgrade container-selinux https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 18:17 |
| opendevreview | Ronelle Landy proposed openstack/tripleo-quickstart master: Downgrade container-selinux https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 18:19 |
| rlandy | frenzy_friday|rover: I think we didn;t rebild containers | 18:21 |
| rlandy | I think we need the policy downgrade | 18:21 |
| rlandy | maybe as well | 18:21 |
| rlandy | frenzy_friday|rover: I added the policy downgrade to the same review | 18:22 |
| rlandy | so now we have a mixed review :( | 18:22 |
| rlandy | but we need to test project a periodic container build - depenedencies: | 18:22 |
| rlandy | and the a standalone | 18:22 |
| rlandy | frenzy_friday|rover: ^^ with me? | 18:22 |
| frenzy_friday|rover | rlandy, oh! ok, I'll tp with container builds tomorrow morning then | 18:26 |
| rlandy | k - I'll try it | 18:27 |
| rlandy | frenzy_friday|rover: you can check results tomorrow | 18:27 |
| frenzy_friday|rover | thanks :) | 18:27 |
| * frenzy_friday|rover going afk | 18:27 | |
| rlandy | frenzy_friday|rover: https://review.rdoproject.org/r/c/testproject/+/45359 | 18:31 |
| renich | Hello! 0/ | 19:30 |
| opendevreview | Ronelle Landy proposed openstack/tripleo-quickstart master: Downgrade container-selinux https://review.opendev.org/c/openstack/tripleo-quickstart/+/866180 | 19:30 |
| renich | I'm struggling to downgrade a container in my RHOSP 16.2 installation. I was told to do so, I'm trying something similar to this: https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.2/html/transitioning_to_containerized_services/assembly_obtaining-and-modifying-container-images#ref_layering-image-preparation-entries_obtaining-and-modifying-container-images | 19:31 |
| renich | My containers-prepare-parameter.yaml looks like this: https://paste.openstack.org/show/bNNQ7CVt4psRG345zj4R/ | 19:36 |
| renich | I appreciate if anyone could take a look. | 19:36 |
| opendevreview | Merged openstack/tripleo-common stable/zed: Align tss user config with qemu and nova use cases https://review.opendev.org/c/openstack/tripleo-common/+/865991 | 19:38 |
| opendevreview | Merged openstack/tripleo-heat-templates stable/zed: Nova: Generate wrapper scripts during config file generation https://review.opendev.org/c/openstack/tripleo-heat-templates/+/865992 | 19:38 |
| opendevreview | Merged openstack/tripleo-common master: Generic inventory and playbook https://review.opendev.org/c/openstack/tripleo-common/+/865692 | 19:38 |
| renich | OK, figured it out. It required: name_prefix: 'myorg-containers-' at the second strategy. | 20:02 |
| opendevreview | Alan Bishop proposed openstack/tripleo-heat-templates master: Ensure the internal glance-api service is deployed https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866075 | 20:51 |
| opendevreview | Chris Sibbitt proposed openstack/tripleo-ansible stable/wallaby: Fix molecule failures in tripleo_collectd https://review.opendev.org/c/openstack/tripleo-ansible/+/866215 | 20:51 |
| rlandy | frenzy_friday|rover: ha - I think probalem may have disappeared | 20:59 |
| rlandy | components are passing now | 20:59 |
| *** dviroel is now known as dviroel|afk | 21:04 | |
| opendevreview | John Fulton proposed openstack/tripleo-ansible master: Introduce tripleo_ceph_client_files standalone Ansible role https://review.opendev.org/c/openstack/tripleo-ansible/+/865197 | 22:05 |
| opendevreview | Merged openstack/tripleo-ansible master: Modify how tripleo_nftables gets its configurations https://review.opendev.org/c/openstack/tripleo-ansible/+/863872 | 22:06 |
| *** dasm is now known as dasm|off | 22:23 | |
| *** rlandy is now known as rlandy|out | 23:01 | |
| opendevreview | David Vallee Delisle proposed openstack/tripleo-heat-templates stable/train: [TRAIN-ONLY] Passing NovaComputeOpt{Volumes,EnvVars} to hybrid containers https://review.opendev.org/c/openstack/tripleo-heat-templates/+/866238 | 23:46 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!