Tuesday, 2018-03-27

*** rlandy is now known as rlandy|bbl00:10
*** odyssey4me has quit IRC00:11
*** odyssey4me has joined #zuul00:11
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: add gentoo systemd image for testing  https://review.openstack.org/55666100:17
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: DNM: testing gentoo nodepool-dsvm  https://review.openstack.org/55667900:18
*** acozine1 has quit IRC00:21
*** flepied_ has quit IRC00:29
corvusoh i still need to disable nullwrap.  that would be good to do before release.00:38
*** harlowja has quit IRC00:53
tristanCcorvus: thanks for answering the release question at the meeting01:03
tristanCwhat manual things you need to do to make the webui work?01:03
*** tobiash has quit IRC01:05
corvustristanC: i'm not sure, morderd says he should have patches tomorrow, hopefully -- i'm fuzzy on the details01:24
tristanCfwiw, having https://review.openstack.org/551327 and the patch bellow would make webui developper life easier01:36
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: add gentoo systemd image for testing  https://review.openstack.org/55666101:58
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: DNM: testing gentoo nodepool-dsvm  https://review.openstack.org/55667901:59
*** Wei_Liu has joined #zuul02:13
*** dmsimard|cave is now known as dmsimard02:29
*** rlandy|bbl is now known as rlandy03:19
*** rlandy has quit IRC03:19
*** tobiash has joined #zuul03:49
*** bhavik1 has joined #zuul03:59
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: add gentoo systemd image for testing  https://review.openstack.org/55666104:23
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: DNM: testing gentoo nodepool-dsvm  https://review.openstack.org/55667904:24
*** bhavik1 has quit IRC04:57
*** Wei_Liu has quit IRC05:35
*** Wei_Liu has joined #zuul05:36
tobiashcorvus: timezone magic happened :)06:38
tobiashcorvus, jlk: I retested the latest github3.py in my testenv and startup, check and gating works without exceptions in the log06:38
*** chrnils has joined #zuul06:44
*** flepied has joined #zuul07:24
*** xinliang has joined #zuul07:51
*** xinliang has quit IRC07:51
*** xinliang has joined #zuul07:51
*** tosky has joined #zuul07:54
LinuxJediShrews (or anyone else): do you happen to have an example job that will execute on the static nodepool? All the examples appears to be OpenStack based and I appear to be missing some key points in my yaml08:34
tobiashLinuxJedi: what do you have right now? using static nodes should not be different than any other node08:47
LinuxJedihttps://github.com/libattachsql/libattachsql/pull/202/files and https://github.com/libattachsql/libattachsql-zuul not sure what I'm doing wrong as I've never done this before but "scanbuild" isn't getting triggered08:48
LinuxJedimy nodepool is based off Shrews' one if that helps: http://paste.openstack.org/show/714027/08:50
tobiashLinuxJedi: scanbuild uses the ubuntu-xenial label which might be a different label than the label you defined in nodepool for your static node08:50
tobiashhttps://github.com/libattachsql/libattachsql-zuul/blob/master/zuul.yaml#L808:50
tobiashah ok, so the label matches08:50
tristanCLinuxJedi: is this project a "config-projects" or "untrusted-projects" ?08:51
tobiashLinuxJedi: do you have libattachsql/libattachsql-zuul listed on your tenant config?08:52
tristanCLinuxJedi: if it's a config-project, then the zuul.yaml is only taken into account when the change is merged08:52
LinuxJedimy main.yaml: http://paste.openstack.org/show/715360/08:53
tobiashhrm, I don't see any obvious mistake there08:53
tobiashLinuxJedi: can you do a recheck and look at the logs of the zuul-scheduler?08:53
LinuxJeditristanC: I tried shoving it all in libattachsql's zuul.yaml as an untrusted-project and it complained that I couldn't define jobs that (I think, that was yesterday)08:54
openstackgerritIan Wienand proposed openstack-infra/zuul-jobs master: Handle blank public_ipv4  https://review.openstack.org/55678408:54
LinuxJedischeduler log: http://paste.openstack.org/show/715362/08:55
tobiashLinuxJedi: can you change the log level to debug and repeat that?08:57
tobiashthe info logging doesn't seem to be helpful in this case08:57
LinuxJeditobiash: how do I do that?08:57
tobiashdo you have a log config file?08:57
LinuxJediwhat is one of those?08:57
LinuxJedi(think I have had about 6 hours experience of Zuul and only understood the quickstart :) )08:58
tobiashLinuxJedi: https://docs.openstack.org/infra/zuul/admin/components.html#attr-scheduler.log_config08:58
tobiashyou need to configure the logging config08:58
tobiashlet me quick get a sample logging config08:59
tobiashLinuxJedi: that's the logging config I am using: http://paste.openstack.org/show/715364/09:01
tobiashit's a bit messy currently but should get you going09:02
LinuxJeditobiash: awesome! Thanks, how about this? http://paste.openstack.org/show/715366/09:04
tobiashthat's at least more logging :)09:05
tobiashLinuxJedi: do you have a base job?09:06
tobiash2018-03-27 10:03:39,390 DEBUG zuul.layout: No matching parents for job base and change <Change 0x7f44341d0470 202,809001883c3a356346363051ad84e087cdfa44f0>09:06
LinuxJediI don't think so09:07
tobiashthen that's the problem09:07
* LinuxJedi quickly googles what that is :)09:08
tobiashLinuxJedi: you probably missed a step in the guide almost at the end09:09
tobiashsearch for 'Edit /etc/zuul/main.yaml so that it looks like this:' in the zuul from scratch guide09:09
tobiashLinuxJedi: you need to add openstack-infra/zuul-base-jobs and openstack-infra/zuul-jobs to your main.yaml09:10
LinuxJediah! Ok. I missed that out as it looked OpenStack specific. My bad!09:12
*** hashar has joined #zuul09:17
LinuxJediprogress! Scanbuild now shows as queued at least :)09:20
tobiashyah, that's like a standard library for zuul09:20
LinuxJedimany thanks tobiash :)09:20
tobiashno problem :)09:20
LinuxJedi"nodepool.NodePool: ZooKeeper suspended. Waiting" <- that would explain my next problem :)09:24
tobiashLinuxJedi: is zookeeper running and nodepool configured to use that zookeeper?09:27
LinuxJediyes and yes (localhost). Zookeeper's logging appears to be broken so not sure what is going on there09:28
LinuxJediok, fixed that. Turns out I missed the port on nodepool's zookeeper configuration. We have progress! A failure! Appears I have some kind of key problem with the static builder. Time to read up on how that is supposed to work :)09:51
*** tosky__ has joined #zuul10:25
*** tosky is now known as Guest7254810:25
*** tosky__ is now known as tosky10:25
LinuxJeditobiash: sorry to bug you again, any idea what the "implicit role" is? http://paste.openstack.org/show/715378/10:49
tobiashLinuxJedi: do you have an issue or is it just the log lines?10:50
tobiashthey should be harmless10:50
tobiashzuul adds an implicit roles path to ansible if your repo under test contains a /roles dir10:51
tobiashif it doesn't it spits out this log line10:51
*** JasonCL has quit IRC10:51
tobiashmaybe we want to change that line to debug log level10:51
tobiashcorvus: am I correct? ^10:51
LinuxJeditobiash: ok. I thought that might be my problem. Basically executor doesn't appear to be executing, retries and fails. The worker is showing "Mar 27 11:51:27 ubuntu sshd[3264]: Connection closed by 192.168.56.101 port 41308 [preauth]"10:52
tobiashLinuxJedi: execute 'zuul-executor verbose'10:52
tobiashthat should make the zuul-executor ansible log verbose10:52
tobiashmaybe that helps in debugging10:52
tobiashbut your error message might indicate that you have a permission problem10:53
tobiashdoes your static node have a zuul user with public key auth using the zuul ssh key?10:53
LinuxJediI suspect the ssh keys are where I went wrong. I couldn't find any good documentation on which key should go where. I suspect I need the nodepool public key as an authorized key on the static node?10:55
tobiashyes10:55
LinuxJedibetter, still failing but SSH auth is at least happening now :)10:57
*** sshnaidm has quit IRC11:30
LinuxJediHmmm... the ansible verbose logging isn’t giving me anything so I guess it is something else11:31
*** openstackgerrit has quit IRC11:33
Shrewsmorning12:04
ShrewsLinuxJedi: i can be of assistance after some coffee12:04
ShrewsLinuxJedi: did you set the host keys?12:05
Shrewsoh, you're past that point. /me coffees12:07
*** sshnaidm has joined #zuul12:09
LinuxJedilol! Yep. Past that. At the point where execution is failing but not really telling me why12:27
*** openstackgerrit has joined #zuul12:27
openstackgerritJens Harbott (frickler) proposed openstack-infra/zuul-jobs master: Handle blank public_ipv4  https://review.openstack.org/55678412:27
ShrewsLinuxJedi: i had to manually install python2 on my ubuntu VMs... but can i see your latest zuul debug log?12:28
LinuxJedilet me re-run and I'll give you what I have12:28
ShrewsLinuxJedi: and seeing your zuul.yaml in your trusted and untrusted projects would help12:28
*** Wei_Liu has quit IRC12:30
*** Wei_Liu has joined #zuul12:30
LinuxJediShrews: debug log and execution log: http://paste.openstack.org/show/715386/12:30
LinuxJediShrews: untrusted: https://github.com/libattachsql/libattachsql/pull/202/files config: https://github.com/libattachsql/libattachsql-zuul12:30
Shrewsoh, you've defined your job in the config project. you could do that in the untrusted12:33
LinuxJedidoes it make a difference?12:34
LinuxJediI'll move it and see...12:35
*** rlandy has joined #zuul12:36
ShrewsLinuxJedi: probably not. also doesn't look like the executor is using DEBUG12:38
Shrewsas there is frustratingly little info there12:39
LinuxJediooo... Adding Python to the worker appears to have fixed things a bit...12:40
ShrewsLinuxJedi: we define jobs in our trusted config. but the idea is that each untrusted repo can define their own12:41
LinuxJediShrews: ok, so the build failed. I'm pretty sure I know why it failed, but I'm not getting any build logs show in builds.html12:42
ShrewsLinuxJedi: did you get debug enabled on the executor?12:42
LinuxJedinot yet, still figuring out the magic for that12:43
*** odyssey4me has quit IRC12:43
ShrewsLinuxJedi: i use this locally: http://paste.openstack.org/show/715391/12:43
*** odyssey4me has joined #zuul12:43
Shrewseverything goes to /tmp/zuul-debug.log12:44
ShrewsLinuxJedi: can use that for both scheduler and executor12:44
LinuxJediah! Stupid me, I was looking for a way to do it in the logging config file rather than zuul.conf...12:45
ShrewsLinuxJedi: zuul.conf should have something like: http://paste.openstack.org/show/715393/12:46
LinuxJedi👍 yep, it is now. Will retest and get some debugging info...12:48
Shrewsoh neat. weechat rendered that thumbs up12:49
Shrewshow 2000's of it12:49
LinuxJedilol! I'm impressed that IRCCloud took colon-plus-colon as thumbs up like Slack does12:50
LinuxJedicolon-plus-one-colon even12:51
LinuxJediShrews: latest debug log, better? http://paste.openstack.org/show/715394/ :)12:51
ShrewsLinuxJedi: well, it's cutoff, but looks like ansible was doing stuff12:52
LinuxJediShrews: yep. Installing Python on the worker fixed that12:53
Shrews\o/12:53
*** dkranz has joined #zuul13:02
dmsimardIs it expected that Zuul doesn't enqueue a child patch when a parent patch (depends-on) has merged ?13:07
AJaegerdmsimard: yes - if those do not co-gate. If tehy share the same gate queue, then they are submitted together13:08
*** JasonCL has joined #zuul13:11
*** JasonCL has quit IRC13:12
*** JasonCL has joined #zuul13:13
tobiashdmsimard: you can add parent-change-enqueued as trigger13:14
tobiashdmsimard: https://docs.openstack.org/infra/zuul/admin/drivers/zuul.html#trigger-configuration13:14
*** JasonCL has quit IRC13:15
*** JasonCL has joined #zuul13:15
LinuxJediso, I'm up to the point where things are building. But the builds tab in the Zuul dashboard is empty. Is there some kind of config to turn that on?13:16
Shrewstobiash: does that ^^ require an sql database?13:21
tobiashShrews, LinuxJedi: yes13:21
ShrewsI absolutely *love* how that isn't documented anywhere, btw13:21
tobiashyou need to configure an sql connection and add sql reporting to the pipeline13:21
LinuxJedido I need to install any schemas or is that automatic?13:21
tobiashthat is automatic13:22
LinuxJedioh, in the pipeline as well as the config... OK, I'll try and find that too13:22
tobiashLinuxJedi: the pipeline part is there: http://git.openstack.org/cgit/openstack-infra/project-config/tree/zuul.d/pipelines.yaml#n4913:23
tobiashand the config part: https://docs.openstack.org/infra/zuul/admin/drivers/sql.html13:24
*** acozine1 has joined #zuul13:29
* mordred waves to LinuxJedi13:30
LinuxJedihey mordred :)13:30
ShrewsHey, who wants to create a database designed for use in the cloud????13:35
ShrewsIf we just had an energetic Aussie and a scrappy QA person, I think we could do it.13:38
LinuxJedilol!13:38
LinuxJediok, well, I got the builds tab working, but the logs give me URLs like "finger://localhost.localdomain/e4e737439a584d699822a05a1174ef4a" instead of.. logs13:39
tobiashmordred: do you know if shade's create_image_snapshop will abort with wait=true and the in progress image disappears?13:41
*** dtruong2_ has joined #zuul13:42
*** elyezer has quit IRC13:49
corvustobiash: yes, let's switch the implied role line to debug :)13:50
LinuxJediI'm afraid I think I'm not going to want to know the answer to this, but how do you make the log_url be an actual web URL I can retrieve the logs from?13:51
mordredtobiash: hrm. that's a fascinating question13:52
mordredtobiash: nope. it will not abort13:53
corvusLinuxJedi: i think the first question is: where do you want the logs to go?13:53
corvusLinuxJedi: (also, you've now run past the end of the zuul-from-scratch doc -- you're pretty close to a working system, but we're definitely in undocumented territory)13:54
*** dtruong2_ has quit IRC13:54
mordredtobiash: it will happily continue polling for the image to complete - and will assume any errors are temporary13:54
corvusLinuxJedi: we copy our logs to a static webserver which serves them via apache.13:54
corvusLinuxJedi: for testing, it can even be the same server zuul runs on, but obviously, that's probably not what you want in the long run13:54
mordredtobiash: this is partly because we don't want an API service hiccup to cause us to think the image failed13:54
corvusLinuxJedi: (in the future, we're going to move our log hosting to an object store, like swift)13:55
tobiashmordred: interesting13:55
mordredtobiash: that said - if we got an image id in the first place, we could treat 404 from the wait_for_image loop as an error - like a 404 shouldn't happen in the middle of waiting13:55
LinuxJedicorvus: ok, that is fine, I can work with that. Where are they stored?13:55
corvusLinuxJedi: did you add the zuul-base-jobs repo?13:56
LinuxJediyes13:57
corvusLinuxJedi: did you also add the zuul-jobs repo?13:58
LinuxJediyes13:59
LinuxJediI needed to do that otherwise builds didn't work at all13:59
tristanCtobiash: do you have a release pipeline working with github?14:00
tobiashtristanC: a pipeline triggered by a tag?14:00
pabelangermorning14:01
pabelangerhttps://zuul-ci.org/docs/zuul/user/jobs.html seems to 404, is that a known issue?14:01
*** elyezer has joined #zuul14:01
tristanCtobiash: yes, not sure how to filter on ^refs/tags/ for github push14:01
*** jamielennox has quit IRC14:01
*** jamielennox has joined #zuul14:02
tobiashtristanC: I have this: http://paste.openstack.org/show/715406/14:02
tobiashbut I'm not sure somebody tried it out already ;)14:02
mordredtobiash: remote:   https://review.openstack.org/556865 Abort waiting for image on 40414:03
mordredtobiash: something like that (untested)14:03
corvusmordred: were we going to do any default log publishing in zuul-base-jobs?14:03
mordredcorvus: we'd talked about it14:04
mordredcorvus: I think witha default of publishing to a local directory14:04
corvusmordred: yeah, i think that's probably the right thing to do (as i sit here and type out all the stuff LinuxJedi will need to do)14:04
mordredcorvus: so that an AIO install using zuul-base-jobs would wind up with logs in a known directory (that could even be served by a default aio apache config)14:04
mordredcorvus: ++14:05
tristanCtobiash: i see, thanks, i'll give it a try14:06
tobiashtristanC: but I have no idea if it works ;)14:07
corvusLinuxJedi: we'll make the zuul-base-jobs repo more useful in a bit.  but for now, to keep moving, you'll need to make your own base job.  start by removing zuul-base-jobs from your tenant config, then do the steps in this etherpad: https://etherpad.openstack.org/p/sqJ1DzLmSU14:07
corvusLinuxJedi: (replace "config-repo" with whatever you called your config-repo)14:08
corvusLinuxJedi: that copies the base job, and its playbooks, from zuul-base-jobs into your config-repo.14:08
corvusLinuxJedi: then, once you have your own base job, we can add log publishing to it14:08
corvusoh, actually, the upload-logs role uses ssh doesn't it?14:09
corvusoh, it uses synchronize -- maybe that will work if we just run it on localhost...14:11
corvusmordred: what do you think of the etherpad? ^14:11
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Switch implicit role not found message to debug  https://review.openstack.org/55686614:12
tobiashcorvus, LinuxJedi ^14:12
mordredcorvus: I think it looks fine - assuming synchronize will dtrt when run on localhost14:13
corvusLinuxJedi: okay, let me know how that goes :)14:15
pabelangerI'm trying to help ansible-network bring some jobs online with softwarefactory, but unsure why zuul is reporting a configuration error to an across projects.14:23
pabelangereg: https://github.com/ansible-network/ansible-zuul-jobs/pull/3#issuecomment-37654076314:23
corvusLinuxJedi, Shrews: i'm thinking i'd like to add run-time and config-time options to switch the logging from standard to debug.  so basically instead of having one built-in logging config, we have two.14:23
pabelangerwould have expected that to be reported to ansible-network/network-engine14:24
corvuspabelanger: oy, that formats very poorly :(14:24
tobiashcorvus: yah, that makes sense if you don't want to have some fully fledged logging config file14:27
corvuspabelanger: take it at face value14:27
corvuspabelanger: network-engine really has that config: https://github.com/ansible-network/network-engine/blob/ansible-test/.zuul.yaml14:28
pabelangerOh, somebody force merged code14:28
pabelangercorvus: thanks, I missed that14:28
corvuspabelanger: of course, why the proposed change to ansible-zuul-jobs didn't fix it, i'm not sure14:28
corvuspabelanger: can i see the zuul tenant config?14:30
pabelangercorvus: let me find it14:30
pabelangerbut, that branch likely shouldn't exist either14:30
tristanCcorvus: the tenant configuration is https://softwarefactory-project.io/r/gitweb?p=config.git;a=blob;f=zuul/ansible_networking.yaml14:31
pabelangerthanks14:31
corvustristanC, pabelanger: i'm very confused.  afaict, zuul should currently have a broken config because of the missing job, but that PR should have fixed it...14:38
pabelangercorvus: I think the PR is the broken code, if I am understanding write14:38
pabelangerright*14:39
corvuspabelanger: what's broken about it?14:39
pabelangerhttps://github.com/ansible-network/ansible-zuul-jobs/tree/ansible-test-sanity was created instead of using personal fork14:39
pabelangerthen the PR to master was created from it14:40
corvusi'm not sure how that causes the job not to be defined (that should cause it to be defined on two branches)14:41
pabelangerah, I think I understand what you are saying14:42
corvuspabelanger, tristanC: i'd probably look at the debug log at this point to try to figure out what i'm missing about what the configloader was doing14:43
pabelangercorvus: ack, let me see about getting them14:43
tristanCcorvus: sorry about the confusion, it's because we are running with: https://review.openstack.org/#/c/535511/14:45
tristanCor i think it is... the project errors are not kept in the tenant, and it can be observed on https://ansible.softwarefactory-project.io/zuul/info loading_errors field14:46
LinuxJedicorvus: ok, doing that etherpad change the URLs in the web front end, but it doesn't appear to have put logs in /srv/static/logs14:48
corvustristanC: that looks like the same error -- my question still remains -- why doesn't the PR fix the error?  (it adds the job)14:50
jlktobiash: that's good news re github3.py14:52
corvusLinuxJedi: okay, if you run "zuul-executor keep", it will tell the executor not to delete the build directory after the job is complete.  so if you do that, and then run the job again, you can look in tho log to see where the build directory is, then cd into that and look at the logs.  should be in .../work/logs/job-output.txt and job-output.json.14:53
corvusLinuxJedi: that should help us figure out why the log copy didn't work14:54
LinuxJedi👍14:54
LinuxJedi@corvus helpful... 2018-03-27 14:55:52.711059 | TASK [upload-logs : Upload logs to log server 2018-03-27 14:55:53.102382 | localhost | Output suppressed because no_log was given14:58
corvusha14:58
corvusmordred: i'm assuming no_log is set on the synchronize task in upload-logs just because it's chatty?  there's no security implication?15:00
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Add a flag to disable no_log on upload-logs  https://review.openstack.org/55687715:06
corvusmordred, LinuxJedi: ^15:06
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Add a flag to disable no_log on upload-logs  https://review.openstack.org/55687715:12
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: DNM: Test change to upload-logs  https://review.openstack.org/55688515:13
*** JasonCL has quit IRC15:23
tobiashcorvus: there should be no security implication15:24
*** JasonCL has joined #zuul15:24
tobiashI wonder if there is a way to make it non verbose without setting no log15:25
corvustobiash: good question.  i think the issue is that synchronize sets the rsync flag which outputs info about every file.  maybe it's possible to just disable that flag15:26
*** JasonCL has quit IRC15:27
tobiashcorvus: a quick scan of the docs seem to tell me there is none unless there is a way to make disable verbose in rsync with a custom flag15:27
corvusi think it sets the --out-format flag, and does so in order to determine whether the task should set changed or not15:31
*** JasonCL has joined #zuul15:33
corvusi'm not seeing an obvious way to avoid it15:34
tobiashHm, changing that to command and invoking rsync manually would probably solve that but that's a bit ugly15:36
corvusheh, yeah15:36
*** JasonCL has quit IRC15:36
*** JasonCL has joined #zuul15:36
tobiashBut well, even the ansible docs state: 'synchronize is not intended to provide access to the full power of rsync, but does make the most common invocations easier to implement. You stillmay need to call rsync directly via command or shell depending on your use case.'15:38
tobiashIf we have that 'unverbose but please tell me the errors' use case it might be ok to use rsync directly15:39
*** JasonCL has quit IRC15:43
*** JasonCL has joined #zuul15:43
*** JasonCL has quit IRC15:48
Shrewscorvus: how about we update the topic to point things to zuul-ci.org?15:53
corvusShrews: we still need to trigger docs publishing15:53
Shrewscorvus: oh, i saw the docs already there and thought it was done15:53
corvusmaybe i'll manually enqueue some refs later to get them all published15:55
pabelangercorvus: tristanC: to loop back to before, it was because we had zuul.d/job.yml for zuul configuration (not the file extension). Changing to .yaml worked as expected15:55
pabelangerthanks to tristanC for noticing it15:55
pabelangernote*15:55
corvuspabelanger: ah, that's a behavior difference introduced with the load-broken-config patch.  a stock zuul would not have left an error comment on that change.15:56
corvus(because it would not have been detected as a config change)15:56
pabelangercorvus: yes, I agree15:57
openstackgerritJames E. Blair proposed openstack-infra/zuul-jobs master: Add a flag to disable no_log on upload-logs  https://review.openstack.org/55687716:17
openstackgerritJames E. Blair proposed openstack-infra/zone-zuul-ci.org master: Add git.zuul-ci.org  https://review.openstack.org/55696416:23
*** JasonCL has joined #zuul16:23
corvusShrews: i'm triggering builds for the missing docs now16:25
corvusShrews: there's a significant backlog, so that may not happen for a while :(16:29
Shrews*nod*16:30
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696716:31
Shrewscorvus: I'm trying to find the best way to present the gerrit version of the quick start guide. I've got notes for ubuntu, but the other guide does fedora. I also didn't bother with "Service Management" stuff for my test.16:34
Shrewscorvus: So the guides will be inconsistent in at least those aspects16:35
ShrewsI just ran things (zookeeper, gerrit, nodepool, zuul, geard) by hand, but maybe I should present a more "typical" setup?16:36
corvusShrews: that should all be the same16:36
ShrewsOr present it as a "here is a guide to experiment locally"16:36
pabelangercorvus: I wasn't sure if you see my question from this morning, but https://zuul-ci.org/docs/zuul/user/jobs.html is 404. Wanted to see if that was a known issue16:36
pabelangerhttps://zuul-ci.org/docs/zuul/ seems okay16:36
corvusShrews: i'd suggest we expand the zuul-from-scratch guide to branch.  so it starts out with setting everything up in general, then, we have a section for setting up gerrit stuff, and an alternative section for setting up github stuff16:37
corvuspabelanger: we're waiting on publishing jobs to run, will probably be (much) later today16:38
pabelangerack16:38
mordredcorvus, pabelanger, Shrews, tobiash: remote:   https://review.openstack.org/556973 Support updated REST and HTML layout <-- that is a companion to //review.openstack.org/55696716:44
mordredthis is the breaking change that was mentioned in the meeting yesterday16:44
corvustristanC: ^16:44
openstackgerritPaul Belanger proposed openstack-infra/nodepool master: WIP: Add debian-sid to nodepool-dsvm testing  https://review.openstack.org/55697416:45
openstackgerritPaul Belanger proposed openstack-infra/nodepool master: DNM: testing debian-sid  https://review.openstack.org/55697516:45
openstackgerritPaul Belanger proposed openstack-infra/nodepool master: DNM: testing debian-sid  https://review.openstack.org/55697516:49
corvusmordred: did you run tests on https://review.openstack.org/556967 ?  i'm wondering whether the web url tests we wrote are going to pass without changes.  and if so... maybe we need to test some more urls?16:50
mordredtristanC, corvus, tobiash, Shrews, pabelanger: the zuul patch is incomplete - needs some updates to the js, I think to the tests - and I want to add in some deploymnet docs - but I wanted to get the changes up for people's eyeballs early16:50
mordredcorvus: I did not - and I'll be surprised if they do work :)16:50
corvusmordred: aha!  sounds good16:50
*** hashar is now known as hasharDockerized16:52
*** JasonCL_ has joined #zuul17:08
*** JasonCL has quit IRC17:12
openstackgerritMerged openstack-infra/zone-zuul-ci.org master: Add git.zuul-ci.org  https://review.openstack.org/55696417:15
openstackgerritDavid Shrewsbury proposed openstack-infra/zuul master: WIP: Reorganzie ZFS document  https://review.openstack.org/55698817:26
Shrewscorvus: Not quite complete, but sort of what I'm thinking ^^^ based on your suggestion17:26
Shrewswould similarly split up nodepool config based on driver (openstack vs. static)17:28
corvusShrews: cool, broadly speaking i think that'll be good; i'll take a closer look after the build job completes17:29
Shrewsyeah, hard to see without viewing in a browser17:29
Shrewscorvus: mainly just making sure this is the direction you'd like to see before changing too much17:30
corvusShrews: yep; i suspect my comments will be minor, if any.17:31
corvuspabelanger, mordred: i believe https://review.openstack.org/556877 is ready to merge.  the change that tests it sucessfully uploaded logs: https://review.openstack.org/55688517:34
clarkbcorvus: re ^ and also the ipv6 thing happening in -infra, it would be really neat if ansible had something like set -x17:35
corvusLinuxJedi: when https://review.openstack.org/556877 merges, you can restart your zuul scheduler, then add the "zuul_log_verbose" line in the etherpad https://etherpad.openstack.org/p/sqJ1DzLmSU17:36
corvusclarkb: i usually think ara serves that purpose17:36
clarkbcorvus: it sort of does, in the ipv6 case it doesn't actually show you what the value that it evaluated is, just that it resulted in false (wheras in bash conditionals are shown with set -x)17:37
clarkbI guess verbosity in synchronize is less about control flow17:37
corvusyeah, that's a choice we made17:37
corvuswe just need to make the choice reversible :)17:38
LinuxJedicorvus: Cool, thanks. May be tomorrow when I can get back to it17:38
corvusclarkb, dmsimard: i wounder if there's a way to access the values of variables used in conditions inside a callback plugin.  then maybe ara/json can record them17:38
dmsimardcorvus: it's tricky because variables aren't static, you can likely get the value of a variable at one point in time but there's no guarantee that it will remain the same throughout the playbook (or even on different hosts)17:39
corvusLinuxJedi: ack; sorry this took a bit -- our testing process for changing a global role like that has a few steps so we don't regress.  at least it should be in place for you tomorrow17:39
pabelangercorvus: looking17:39
corvusdmsimard: something like "this task used these veriables, here are their values at the start" would probably be enough.  but i'm totally spitballing; no idea if that's feasible.17:40
dmsimardcorvus: unless upstream changed things, callbacks have pretty much access to everything (i.e, all hostvars) .. that includes decrypted contents of an ansible vault17:41
corvusdmsimard: i should be careful what i wish for :)17:41
dmsimardoh, it's scary what you find when you reverse engineer undocumented APIs :D17:42
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Rename javascript package to @zuul-ci/dashboard  https://review.openstack.org/55199917:42
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696717:42
dmsimardTut really you should be able to get the vars but it's "hidden" in an object like "play.get_variable_manager()._hostvars"17:43
dmsimards/Tut/But/17:43
dmsimardjust need to know where (or when) you need to get that "snapshot" (task on start, runner_on_ok, etc.)17:43
mordredcorvus, tristanC, pabelanger, dmsimard, tobiash: ^^ ok, https:////review.openstack.org/556967 should pass tests now - and I also updated the docs to include info on the rewrite rules17:44
dmsimardShrews: I was confused about the ZFS part until I understood it wasn't about the filesystem :)17:45
clarkbdmsimard: ya that has confused me too. Not sure I'm a fan of overloading that one :) doesn't help I actually run ZFS at home17:46
*** JasonCL_ has quit IRC17:48
Shrewsyeah, well, "zuul from scratch" takes up too much of the 1st line character limit, so we make compromises17:48
Shrews:)17:49
mordredShrews: maybe we should call it ZfS to differentiate17:49
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696717:52
mordredsorry - left out an update to the html/js side17:52
*** JasonCL has joined #zuul17:52
openstackgerritMerged openstack-infra/zuul-jobs master: Add a flag to disable no_log on upload-logs  https://review.openstack.org/55687717:56
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696717:56
tobiashmordred: wasn't white label the tenant-less variant?18:00
tobiashhttps://review.openstack.org/#/c/556967/2/tests/unit/test_web_urls.py18:00
mordredtobiash: yes - those should be the equiv 'rewrite' rules to the ones needed for doing white-label for real18:01
tobiashmordred: ah yes, nevermind18:03
mordredhonestly - I think we could remove that /api/ rewrite in that test since our tests don't execute the js so we don't have a sense of whetheror not the status javascript will fetch the json correcty or not18:04
mordredtristanC: I responded to your comment on https://review.openstack.org/#/c/55696718:08
*** JasonCL has quit IRC18:23
mordredtobiash: ah - I just realized I can add a test to make sure the js is doing the right thing18:23
*** JasonCL has joined #zuul18:24
*** JasonCL has quit IRC18:26
dmsimardtristanC and I were discussing something this morning and I was wondering if it's a use case that would make sense...18:28
dmsimardright now the sf.io Zuul is reporting to the openstack gerrit as "Software Factory CI" and the RDO Zuul is reporting as "RDO CI" -- I believe that's configured at the gerrit connection level18:28
*** JasonCL_ has joined #zuul18:29
dmsimardWe're exploring the possibility of moving/migrating the Zuul things to sf.io (while keeping the review.rdoproject.org gerrit). Does that mean we can no longer report as a distinct gerrit user despite being in a different Zuul tenant ?18:29
dmsimardIt's not a deal breaker for us but it feels like a gap18:30
clarkbdmsimard: you could probably have two different connections to the same review.o.o?18:30
dmsimardclarkb: yeah but does that mean processing/scanning the same changes twice ?18:31
clarkbthough I guess you may hvae to do funny pipeline configs in that case18:31
clarkbdmsimard: potentially. It will depend on your pipeline configs18:31
LinuxJedicorvus: not sure it helped much unfortunately: http://paste.openstack.org/show/715445/18:31
*** JasonCL_ has quit IRC18:33
*** chrnils has quit IRC18:39
openstackgerritDavid Moreau Simard proposed openstack-infra/zuul-jobs master: Do not merge: Test lack of ipv4 with limestone nodes  https://review.openstack.org/55700718:49
*** flepied has quit IRC18:51
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Use requests instead of urllib.request in tests  https://review.openstack.org/55405718:51
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696718:51
mordredcorvus, tristanC, tobiash, dmsimard, pabelanger: ^^ that should pass tests now - and I added a test to show white-labeled apis working as expected (which actually showed a bug, so yay)18:53
mordredI reparented it on top of the 'use requests in tests' patch - mostly because that patch makes it a bit more clearer which thing a test is fetching, so I hope it makes the changes to the tests clearer in terms of what's changing18:54
corvusLinuxJedi: the contents of job-output.json may help -- it should have all the info about the upload-logs role; can you take a look at that (and pastebin it if you can)?18:54
dmsimardIs that a legit error? http://logs.openstack.org/84/556784/2/check/tox-py35-on-zuul/5b9de02/ara/result/5dacbf21-f926-46fb-bbe8-5fd0313d8f17/18:55
dmsimardzuul unit tests18:55
pabelangerit is a failure, but not sure if seen before18:57
pabelangerfailing http://logs.openstack.org/88/556988/1/check/zuul-tox-py35/41b902d/testr_results.html.gz too18:58
Shrewsyeah, i think that test has been flapping for some reason18:58
LinuxJedicorvus: http://paste.openstack.org/show/715449/18:58
mordredLinuxJedi: so - I think we're realy close ...19:00
mordredLinuxJedi: it looks like it copied things to "/srv/static/logs/02/202/2ecebd6fec2981fb32551fd367f11382a9e33b8a/check/scanbuild/091a183/job-output.json.gz19:00
mordredLinuxJedi: do you see that file on your server?19:01
LinuxJedinope, I created /src/static/logs and set it world writable on both builder and master. No subdirectories were created19:01
LinuxJedion either machine19:01
mordred*awesome*19:01
LinuxJediexactly :)19:02
corvusit should be happening on the host where zuul-executor is running19:02
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: add gentoo systemd image for testing  https://review.openstack.org/55666119:02
LinuxJedishould be, but whatever shouldn't be happening isn't :)19:03
pabelangercorvus: LinuxJedi: mordred: did we allow bindmount to host OS for /src/static so it can get out of bwrap?19:03
corvusyeah, just meant to clarify on which host we should expect to find the file19:03
corvuspabelanger: it should be in the trusted context19:04
corvuswhich still uses bwrap, but i thought we mounted everything19:04
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: DNM: testing gentoo nodepool-dsvm  https://review.openstack.org/55667919:04
corvuspabelanger: but that's a good thing to double check19:04
mordredthat's a great thing to check though ...19:04
mordredyah19:04
corvus(the last time we did a local copy, that wasn't the case)19:04
pabelangertrusted_rw_paths = ['/srv/static'] I think in zuul.conf19:05
mordredwhat's the  / for the bubblewrap invocatio if we didn't bind-mount it?19:06
pabelangersorry, trusted_rw_paths=/srv/static for zuul.conf19:07
mordreddo we set /tmp/091a183e9e1448c78146dda9dc041e7d as the / ?  -if so, one could look for /tmp/091a183e9e1448c78146dda9dc041e7d/srv/static and see if that's where it got copied instead19:07
pabelangerthat was puppet syntax we have in system-config19:07
pabelangeri didn't think we mounted / by default in bwrap19:08
corvusit may well be a completely transient directory19:10
corvusthough i wonder how creating srv/static worked...19:10
corvusLinuxJedi: are you running zuul-executor as root?19:10
LinuxJedicorvus: no, user is "zuul"19:11
mordredcorvus: maybe it created it in the bwrap transient dir and it then went away?19:11
corvusgood19:11
corvusmordred: yeah.  i'd still expect whatever / is to be read-only19:11
mordredyah19:11
corvusi can investigate that in a bit19:11
LinuxJedisorry for breaking your toys in weird ways guys :)19:11
mordredLinuxJedi: no, this is great!19:12
mordredLinuxJedi: thanks for working though it with us19:12
pabelangermordred: yah, my understanding, that would make sense if was inside bwrap then went away19:12
corvusLinuxJedi: while we continue to try to figure out what's up, why don't we assume pabelanger's hunch is right, and add 'trusted_rw_paths=/srv/static' to the [executor] section of zuul.conf, and restart the executor19:12
LinuxJedisure thing19:12
mordredLinuxJedi: also ...19:12
pabelangeryou'll also need to make sure it has the write directory permissions for zuul user too19:12
mordredyou should update the post playbook corvus had you make and replace logs.openstack.org with whatever the url prefix should be for  the webserver serving your /srv/static dir19:13
LinuxJedipabelanger: yea, I set it to 777 for now (I know, bad, but I'm just hacking a demo for now)19:13
pabelangerLinuxJedi: don't worry, we did the same with zuulv3-dev IIRC19:13
LinuxJedimordred: yep, I was going to do that once I had a web server there, after I knew the log copy was working ;)19:13
mordredLinuxJedi: cool. just making sure :)19:14
*** JasonCL has joined #zuul19:15
LinuxJedithere are some Ansible specific stuff I'd like to ask later. Such as how to make the test fail on the first bash failure. I suspect that is just my dumb usage of Ansible though19:15
LinuxJediwoot! That fixed it! Nice one pabelanger :)19:15
pabelangerYay19:16
mordredLinuxJedi: \o/19:16
*** JasonCL has quit IRC19:16
pabelangerI can push up a patch for zfs shortly19:17
*** JasonCL has joined #zuul19:17
*** elyezer has quit IRC19:18
LinuxJedicorvus: I've left a bunch of notes on zuul-from-scratch for you (prefixed with LXJ). Hope it helps.19:18
LinuxJediI mean https://etherpad.openstack.org/p/zuul-quickstart-and-zfs(zuul-from-scratch)19:19
corvusLinuxJedi: cool thanks!  you're like, maybe, the third person who isn't the author to run through it19:20
Shrewsi told him he was the first. i don't know of 2 others19:21
corvusoh, er, they're all first!19:24
corvusi just confirmed we mount /afs in trusted on our executors for basically the same reason; so it seems very likely we should have expected this to be the solution :)19:25
*** hasharDockerized is now known as hashar19:25
corvusso when we add this role to zuul-base-jobs, we should document that, and also in ZfS19:25
pabelangeryah, will be helpful for single node deployments19:26
*** JasonCL has quit IRC19:28
*** JasonCL has joined #zuul19:29
*** elyezer has joined #zuul19:30
*** JasonCL has quit IRC19:30
*** JasonCL has joined #zuul19:32
*** JasonCL has quit IRC19:33
*** JasonCL has joined #zuul19:34
*** harlowja has joined #zuul19:34
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Reorganize REST API and dashboard urls  https://review.openstack.org/55696719:35
*** JasonCL has quit IRC19:38
openstackgerritMerged openstack-infra/zuul-jobs master: Handle blank public_ipv4  https://review.openstack.org/55678419:46
*** JasonCL has joined #zuul19:52
*** flepied has joined #zuul19:53
*** flepied has quit IRC19:56
gundalowWhat's the full path to {{ zuul.project.src_dir }}? "{{zuul.executor.work_root }}/{{ zuul.project.src_dir }}" doesn't exist19:56
*** flepied has joined #zuul19:56
*** JasonCL has quit IRC19:59
*** flepied has quit IRC20:02
*** flepied has joined #zuul20:03
mordredgundalow: zuul.project.src_dir will be on the remote node - and it is, by default, /home/zuul/src/{{ zuul.project.canonical_name }} ... so for ansible would be /home/zuul/src/github.com/ansible/ansible (for instance)20:03
mordredgundalow: zuul.executor.work_root is on the executor where ansible is being run from20:03
gundalowaah, that makes sense20:03
mordredgundalow: actually - I slightly misspoke20:03
mordredgundalow: zuul.project.src_dir will be "src/github.com/ansible/ansible"20:04
gundalowI wondered if that was the case, but I couldn't do delegate_to: localhost (rightly so), so I couldn't check20:04
*** flepied has quit IRC20:04
mordredit's assumed to be used relative to the remote user home dir20:04
corvusyeah, so it should be usable on either the executor or the remote node20:04
corvusdepending on how you prefix it20:04
*** flepied has joined #zuul20:04
corvusgundalow's example is the right way to find it on the executor; mordred's is the right way on the remote node (or, perhaps better would be "{{ ansible_user_dir }}/{{ zuul.project.canonical_name }}")20:05
corvusgrr20:05
*** flepied has quit IRC20:05
corvusgundalow's example is the right way to find it on the executor; mordred's is the right way on the remote node (or, perhaps better would be "{{ ansible_user_dir }}/{{ zuul.project.src_dir }}")20:05
corvusdid i get that right that time? :)20:06
gundalowremote node is what I'm after20:06
gundalowfull path20:06
*** flepied has joined #zuul20:06
pabelangerthe info is also logged into zuul-info/inventory.yaml on the logs server, if you want to see the actually variable we setup too20:07
gundalow"/home/zuul/src/{{ zuul.project.src_dir }}"20:07
corvususing ansible_user_dir just makes it a bit more generic/future_proof20:07
pabelangerI want to say sf.io doesn't use /home/zuul, let me check20:07
corvusgundalow: zuul.project.src_dir includes src/ so you can drop that component20:07
gundalowI was using https://softwarefactory-project.io/logs/73/11673/1/gate/sf-rpm-build/3d8904a/zuul-info/inventory.yaml (from someone elses log) I guess I should dump all vars myself to be sure what I'm using20:07
gundalowack20:07
*** JasonCL has joined #zuul20:07
gundalowThanks :)20:07
pabelangeryah, /home/zuul-worker is softwarefactory20:08
gundalowsweet20:08
gundalowthanks :)20:08
mordredcorvus: https://review.openstack.org/#/c/556967/ is ready for review (as are the two patches it's stacked on)20:09
mordredpabelanger, dmsimard, tristanC: ^^  if you have a sec20:10
*** flepied has quit IRC20:10
*** flepied has joined #zuul20:11
*** JasonCL has quit IRC20:12
*** flepied has quit IRC20:12
*** flepied has joined #zuul20:13
pabelangermordred: +220:14
mordredpabelanger: woot. thanks20:14
*** flepied has quit IRC20:14
*** flepied has joined #zuul20:15
corvusmordred: +2; should we wait for an ack from tristanC?20:15
*** flepied has quit IRC20:16
*** flepied has joined #zuul20:18
mordredcorvus: maybe? he left a few inline comments before and didnt' seem worried about the direction - we've got some time while we figure out that puppet failure anyway though20:19
*** JasonCL has joined #zuul20:24
*** tosky has quit IRC20:25
*** JasonCL has quit IRC20:26
*** tosky has joined #zuul20:30
openstackgerritMerged openstack-infra/zuul master: Rename javascript package to @zuul-ci/dashboard  https://review.openstack.org/55199920:34
mordredcorvus: got a sec to look at https://review.openstack.org/#/c/554057/ while I'm poking at the puppet changes?20:38
*** JasonCL has joined #zuul20:39
corvusmordred: lgtm20:40
mordredcorvus: sweet, thanks20:42
*** JasonCL has quit IRC20:42
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: add gentoo systemd image for testing  https://review.openstack.org/55666120:43
*** JasonCL has joined #zuul20:43
*** hashar has quit IRC20:46
*** JasonCL has quit IRC20:48
*** acozine1 has quit IRC21:09
*** dkranz has quit IRC21:13
pabelangertobiash: I think i am having an issue with plugin detecting with zuul on untrusted jobs, I'm struggling to understand why https://github.com/ansible-network/network-engine/pull/11/files is failing. As I understand ansible-playbook will only load plugins next to a playbook, but since the playbook is under test, there is no plugin, just the top-level directory. Don't know why it is failing21:34
pabelangerhttp://docs.ansible.com/ansible/devel/plugins/action.html#enabling-action-plugins21:35
pabelangerI am guessing maybe because we are placing the project into the role path by default for zuul-executor, even if job isn't using it?21:37
pabelangeractually, I should be able to test this with a unit test in zuul to better understand21:37
*** JasonCL has joined #zuul21:39
*** JasonCL has quit IRC21:42
pabelangertobiash: actually, we have something in tree, but not tested. This layout, if contained a zuul.yaml, I would expect to be safe: http://git.openstack.org/cgit/openstack-infra/zuul/tree/tests/fixtures/config/speculative-plugins/git/org_project321:51
pabelangersince the play is one folder lower then filter_plugins21:51
pabelangerbut, I think because we load it into role path, it is failing21:52
pabelangerneed to grab some food21:53
*** JasonCL has joined #zuul21:54
*** JasonCL has quit IRC21:56
*** ChanServ changes topic to "Discussion of the project gating system Zuul | Docs: https://zuul-ci.org/docs/ | Source: https://git.openstack.org/cgit/openstack-infra/zuul/ | Roadmap: https://storyboard.openstack.org/#!/board/53 | Channel logs: http://eavesdrop.openstack.org/irclogs/%23zuul/"21:57
corvusShrews: topic changed :)21:57
*** JasonCL has joined #zuul21:57
*** JasonCL has quit IRC22:02
pabelangercorvus: tobiash: okay, I think I see what is happening, http://git.openstack.org/cgit/openstack-infra/zuul/tree/zuul/executor/server.py#n1232 is what is adding the project into the role path, which is then failing on _blockPluginDirs(). maybe we could discuss at once 3.0 is released out projects could maybe opt out of being added to the role path on the executor22:11
pabelangerhow* projects22:11
corvuspabelanger: we could probably just have it automatically not add the project to the role path if it hits the plugin block22:14
pabelangercorvus: yah, that would actually work here22:16
*** yolanda has quit IRC22:25
*** yolanda has joined #zuul22:27
*** JasonCL has joined #zuul22:29
*** elyezer has quit IRC22:31
openstackgerritMonty Taylor proposed openstack-infra/zuul master: Update docs with better websocket instructions  https://review.openstack.org/55708322:32
*** JasonCL has quit IRC22:33
openstackgerritMatthew Thode proposed openstack-infra/nodepool master: DNM: testing gentoo nodepool-dsvm  https://review.openstack.org/55667922:40
*** elyezer has joined #zuul22:41
pabelangercorvus: fungi: what about testing SetEnvIf and check remote_host first to be more explicit22:45
corvuspabelanger: wrong channel?22:45
pabelangersorry22:45
*** jimi|ansible has quit IRC22:58
*** JasonCL has joined #zuul23:03
*** JasonCL has quit IRC23:04
*** tosky has quit IRC23:25
*** harlowja has quit IRC23:32
*** JasonCL has joined #zuul23:32
*** JasonCL has quit IRC23:36
*** jimi|ansible has joined #zuul23:53

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!