16:00:38 #startmeeting OpenStack-Ansible 16:00:39 Meeting started Thu Jun 30 16:00:38 2016 UTC and is due to finish in 60 minutes. The chair is odyssey4me. Information about MeetBot at http://wiki.debian.org/MeetBot. 16:00:40 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 16:00:43 The meeting name has been set to 'openstack_ansible' 16:00:49 Thanks all 16:00:56 #topic Agenda & rollcall 16:01:22 here 16:01:32 \o/ welcome back odyssey4me 16:01:33 \o/ 16:01:35 o? 16:02:14 o7 16:02:16 o/ 16:02:31 0/ 16:02:36 o/ 16:02:45 o/ 16:04:06 o/ 16:04:13 o/ 16:04:22 * odyssey4me just finished reading the log from last week's meeting :p 16:04:42 mhayden did fast and well IIRC 16:04:42 I'm sure that was just a rollercoaster read. 16:05:30 alrighty, let's rumble :) 16:05:38 #topic Review action items from last week 16:05:53 #topic MariaDB 10.1 Upgrade for Newton 16:06:00 * odyssey4me hands the mic to adreznec 16:06:34 o/ 16:06:39 * mhayden stumbles in 16:06:56 Hey odyssey4me. Not a ton to report yet, I have an environment set up locally but didn't have quite as much time to look at it as I was hoping for 16:06:56 lol, welcome mhayden - enjoying the show? 16:07:39 adreznec ok, not a major issue - although it seems that it may be a blocker for the PPC support :/ 16:07:42 Haven't run into any issues yet, but I'm going to dig farther in today/tomorrow here and push up some initial test changes 16:07:53 o/ 16:08:05 Yeah, we hit a few other PPC issues I'm work ahead of that 16:08:09 *working 16:08:18 o/ 16:08:21 better late than never 16:08:25 We have discussed whether we should do the 10.1 upgrade for Newton. I think it was at the summit. Everyone was open to it, but no-one volunteered to pick it up as I recall. 16:08:30 It wasn't urgent for anyone. 16:08:49 Yeah, I saw that on the multi-os etherpad 16:08:54 o/ 16:09:16 * automagically mostly here, but troubleshooting OVS simultaneously 16:09:18 i thought it was needed for the 16.04 work? 16:09:38 adreznec We did a MariaDB 5.5 -> 10.0 upgrade process from Kilo->Liberty so there is some prior art around. As I recall the Mitaka branch may still have an in-role test set which you can use for the patch submission. 16:09:50 Yeah, it does 16:10:03 alextricity25: I thought for x86 10.0 is still available in the mirrors for Xenial 16:10:16 odyssey4me: Ok, I'll take a peek at that 16:10:21 I hope it removes some moving parts, actually, due to the built-in galera bits. 16:10:43 adreznec: You're probably right. I'm just going off something I read off some etherpad a few days ago 16:10:45 But of course that means we'll need a patch added to the Mitaka->Newton upgrade process to ensure that things are cleaned up. 16:12:28 I would personally prefer to ditch the extra moving parts and use the packages in Xenial as far as possible, but I think there may be an issue with xtrabackup there.... not sure. 16:13:08 * odyssey4me had a nightmare about all the moving parts in an OpenStack install. 16:13:13 odyssey4me: Yeah, I'll have to test that out 16:13:26 * alextricity25 hugs odyssey4me 16:13:28 OK - any other thoughts before we move on? 16:13:30 it'll be alright 16:13:47 This got emotional quick 16:13:54 10.1 is not so much the problem, it's the missing xtra backup components 16:13:59 * odyssey4me eyes mhayden - it's all your fault isn't it? 16:14:08 lol 16:14:12 i think we should all talk about our feelings 16:14:22 alextricity25: omg okay, you first 16:14:28 Considering we all work in OpenStack, I think that's a bad idea. 16:14:28 w/c ? 16:14:38 Xenial repos only provide 10.0 as well, there was no package update, debian is still shipping 10.0, so we need to bug the debian maintainers if we want to ship 10.1 in Ubuntu's repos 16:14:38 evrardjp: to me that stands for Water Closet. 16:14:40 sorry...didn't mean to deviate 16:14:45 alextricity25: oh yes you di 16:14:46 did* 16:15:06 what's UCA shipping ? 16:15:11 michaelgugino I was thinking that we stick to 10.0 but we switch from the MariaDB packages to the Xenial packages. 16:15:33 The problem is we need the galera patches which are source patches 16:15:38 michaelgugino As far as I can tell that should cater for PPC and remove some moving parts. 16:15:48 Ah, then that died in a fire. 16:15:59 no way to use galera+mariadb10 without the source patches 16:16:08 Ah, well there goes that idea 16:16:11 Was 10.1 where they combined them? 16:16:15 yes 16:16:31 OK, so that pipedream will have to wait for another Ubuntu release. 16:16:48 Right - moving on. 16:16:56 #topic Mid Cycle Planning 16:17:01 we already have build for python packages. let's build deb : - ) - just a joke 16:17:15 looks like xtrabackup is finally out natively for 16.04, so we might be able to ship 10.1+ from mariadb if we chose. 16:17:20 Thanks mhayden for organising stuff so far. We need to start building an agenda. 16:17:33 but that would be a breaking upgrade that we need coverage for during m->n 16:18:23 michaelgugino M->N with N on Xenial requires new hosts & new containers... so upgrades are not much of an issue 16:18:49 let's pick pu that convo a bit later though - we have plenty to work through before then 16:19:01 true, but I'm of the preference of keeping as much the same between trusty and xenial as possible, but I'm okay with making that change personally. 16:19:16 odyssey4me: just a note on the agenda, I'd like to have a docs working session to help improved teh install guide at hte midcycle 16:19:17 plz 16:19:20 I think it's time we start forming an agenda on the mid cycle etherpad 16:19:21 I'll give you another cookie 16:19:23 #link https://etherpad.openstack.org/p/osa-midcycle-newton 16:19:28 \o/ yas 16:21:34 ok, I've added a bit of a framework 16:23:23 Excuse me, odyssey4me and I are having an etherpad argument 16:27:14 lol 16:27:42 for those proposing long sessions, best you plan body breaks ;) 16:27:48 Yeah 16:28:08 ok cool - while that continues let's move on a bit 16:28:55 adreznec Feel free to propose a session to help the power work get ahead. Once we have all proposals up we'll have to check how much time we have and prioritise. 16:29:31 odyssey4me: Sounds good, I'll get that up there. 16:29:32 next up 16:29:43 #topic Backport of OVS work to stable/mitaka 16:29:48 * odyssey4me hands the mic to automagically 16:30:07 I just wanted to see if anyone would have objections to getting this work backported 16:30:26 Also, wondering if anyone has ideas on how we might get gate testing around it in either os_neutron or the AIO 16:30:52 Seems to be a fair bit of demand for the feature, but I’m not networking wizard and could use some help/validation from the community 16:30:58 automagically ok yeah, I'm lagging on sorting out the gating bit - I have committed to doing it and it is getting rather urgent 16:31:14 scenario gating! 16:31:25 woot 16:31:29 I guess what I should do is add it to the mid-cycle planning as a topic. The gating work 16:31:32 in terms of backporting - if the changes are fairly contained and opt-in, I suppose it's not too much of an issue 16:31:40 Its definitely opt-in 16:31:56 there was a fair amount of refactoring of variable names and whatnot for the ovs work 16:31:57 it's hard to tell without looking at the full body of change 16:32:27 This is pretty much it: https://github.com/openstack/openstack-ansible-os_neutron/compare/stable/mitaka...trumant:stable/mitaka 16:32:40 yeah, it may require some rejigging due to the multi-os work and liberal use of the deprecation filter to ensure that var names that worked before keep working 16:32:43 sounds like with the var changes that there would be upgrade impacts L->M? 16:32:53 I’ve been doing testing on it in my lab and hopefully will have results soon 16:33:20 okay, will keep in mind the var naming issues before proposing a patch to stable/mitaka 16:34:01 yeah, var name changes would definitely affect upgrades 16:34:04 sorry to be painful on this point, but it's not stable if we change variables 16:34:09 ^ 16:34:18 looks like the ovs changes need to be updated for xenial as well 16:34:21 Added is fine 16:34:28 there's no UCA for xenial, so those bits will fail 16:34:35 Okay, appreciate the feedback I’m getting from all of you 16:34:38 yeah, if you ensure that any var name changes are covered by the deprecation filter and that there are release notes indicating deprecation in mitaka and removal in newton, then you should be covered 16:34:44 Helps me understand what work would be needed 16:34:53 michaelgugino xenial now does have UCA 16:34:58 oh, cool 16:35:04 I’m happy to cede the floor, unless any of you have additional thoughts 16:35:08 michaelgugino after N1 they did Xenial packages 16:35:27 FYI too we now have UCA mirrors in OpenStack-Infra: http://mirror.dfw.rax.openstack.org/ubuntu-cloud-archive/dists/ 16:35:28 any work of deprecation should be properly filled with an upgrade path 16:35:34 ^ 16:35:38 so I'm working on a patch to consume that 16:35:42 so I'll review -1 if I don't have it :p 16:35:51 because stable 16:35:56 :D 16:36:58 ok, moving along 16:37:00 ok 16:37:08 #topic Release planning and Decisions 16:37:22 Are there any blockers for another Liberty/Mitaka release? 16:37:47 To finalise Kilo and formally EOL it I need some votes on https://review.openstack.org/336075 please. 16:37:55 no critical issue that I am aware of for L/M 16:38:08 d34dh0r53 andymccr ^ 16:38:31 d34dh0r53: out on holiday? 16:38:55 ah, I wasn't aware of that - good! :) 16:39:04 stevelle if you're happy to vote that's be great 16:39:09 queued 16:39:19 shouldn't take long 16:39:38 #action odyssey4me to request Liberty/Mitaka releases and propose subsequent SHA bumps 16:40:03 #topic Ubuntu 1604 LTS Support 16:40:16 Any comments on the current status, and does anyone have any blockers? 16:40:37 https://etherpad.openstack.org/p/openstack-ansible-newton-ubuntu16-04 16:40:55 for those who lost the link 16:41:08 evrardjp: thanks 16:41:15 someone can +1 the wf on my swift patch 16:42:06 then, we just need someone to do horizon, and that's all the major roles 16:42:11 michaelgugino link? 16:42:14 we still have some bugs regarding the lxc bridge 16:42:21 I got it, upgraded my vote 16:42:39 https://review.openstack.org/#/c/334543/ 16:42:42 :) thanks stevell 16:42:48 ah, I see it's done 16:43:11 yeah, I need to finalise https://review.openstack.org/330231 16:43:24 please review and comment on the existing progress 16:43:46 starred 16:43:59 ok, we're close to time so I'm going to rather open up for discussion for any further updates/questions 16:44:03 we need to decide if we are going to continue using our hand-built lxcbr0 bridge for xenial, or if we should use the lxc.net service 16:44:07 #topic Open Discussion 16:44:17 those two are conflicting, and results in the lxcbr0 not coming up after a reboot 16:44:29 we should stick closer to standard IMO 16:44:34 michaelgugino if xenial has something better, let's use it 16:44:39 evrardjp ++ 16:44:49 lxcbr0 is ugly right now 16:45:17 we should, where possible, do the things that a system admin would expect in a normal environment 16:45:18 I don't know if it's better or not, just wanted to throw it back out there 16:45:19 that would require a lot of changes in the test playbooks/roles too michaelgugino 16:45:24 who's child are you calling ugly? :) 16:45:41 stevelle that would be cloudnull's ugly child ;) 16:45:43 not calling names stevelle :D 16:45:56 that's harsh 16:45:57 my preferences is to not manually create lxcbr0 if it's being created by a service 16:45:58 what ? 16:46:08 michaelgugino: +! 16:46:14 +1 I meant 16:46:14 michaelgugino agreed 16:46:21 but, I'm behind on a couple of things and don't have the time to cut a patch right now. Maybe in a couple weeks. 16:46:34 I have questions about https://review.openstack.org/#/c/323504/ .. what's the reason behind having all of these hostnames for each container? Backwards compat? And are they all expected to be resolvable by all hosts and containers? 16:46:40 michaelgugino maybe register a big for it? 16:46:43 *bug 16:46:50 michaelgugino: I'd recommend not using the lxc.net service. 16:46:56 we need to develop a migration method if we want to convert 16:46:57 logan-: that's a good question 16:47:06 though I do agree lxcbr0 should be cleaned up 16:47:08 logan- oh dear, now that's an ugly baby 16:47:08 back/forward compatibility 16:47:27 not using lxc.net I believe should be as simple as dropping an empty service file to mask it 16:47:46 cloudnull: is there a reason why you'd rather not use lxc.net service? 16:47:59 I will defer to cloudnull's judgement as he's the expert in that domain. 16:47:59 michaelgugino I think the security role does a service disable or two - there's likely some prior art there to learn from. 16:48:00 I mean ubuntu should do their job and provide a decent default 16:48:01 it loads the bridge into memory without an interface file. 16:48:09 so you cant restart it 16:48:17 IE ifup/down 16:48:23 you have to restart the service 16:48:42 it also is impossible to plugin the lxc.net interface into a real network 16:49:08 I'll inform myself on this 16:49:09 not possible to bridge it ? 16:49:15 this seems a big deal 16:49:36 eil397: you cant bridge the bridge 16:49:44 logan- to your question, it would seem like we're at that stage where perhaps we should rather be building something like a dnsmasq service in a container which all the hosts talk to - then ensure that it serves the names... then at least it keeps the ugly baby in a small space 16:49:50 ok. add interface to the bridge ? 16:49:53 I'm using an unbound role to have centralized dns resolution instead of syncing hosts. Just trying to figure out what I need to update in my unbound role (currently just syncing {{ container }} 16:50:08 logan-: that should only be executed against the physical hosts. not the containers. 16:50:47 we should use designate to add each new container into a new zone 16:50:52 in the past we had all hosts being able to resolve all hosts and containers but were doing this with the inventory names which resulted in a non-complaint hostname 16:51:24 * odyssey4me kicks evrardjp's butt... 16:51:29 :D 16:51:39 eil397: i guess you could manually add an interface to the bridge. but at last check the service didnt allow you to do that 16:52:18 odyssey4me: ++ for the DNS service idea. 16:52:33 cloudnull: thanks. interesting. i would like to look on this lxc.net service : - ) 16:52:43 rackertom was talking about something similar a while back. 16:52:56 unbound is quite light 16:53:23 yeah, this is one of those things we really need to take a step back and re-look at the purpose and re-imagine how to solve the goals 16:53:41 eil397: if we could achive the same thing without carrying lxcbr0 as something our lxc_host role accomplishes I'm +1 16:54:41 logan- if you have thoughts on how to make the DNS stuff go better, and the time to put a patch up, I think we'd love to see it 16:54:47 cloudnull: that's cheap you could even +2! 16:55:04 that /etc/hosts based thing is becoming a nasty grinch 16:55:05 eil397: if we could achive the same thing without carrying lxcbr0 as something our lxc_host role accomplishes I'm +2 16:55:07 :p 16:55:16 logan-: keep in mind rabbitmq and all the things *recommend* not using dns 16:55:22 Ok I will put that on the list. I've had good luck with the unbound stuff so far. 16:55:41 cloudnull: I think +2 can be if it will be backward compat : - ) 16:56:30 ok, we're pretty much out of time 16:56:34 thanks all! 16:56:35 just a note: I'd like to make sure whatever we end up doing w/regard to DNS is ipv6 compatible/portable. 16:56:40 any further chat please move to the channel 16:56:52 thanks everyone 16:56:53 cloudnull ++ 16:56:55 #endmeeting