Wednesday, 2021-02-03

*** ianychoi__ has joined #airshipit00:14
*** ianychoi_ has quit IRC00:17
*** sreejithp has quit IRC01:54
*** aedan9902 has quit IRC01:54
*** aedan9902 has joined #airshipit02:20
*** aedan9902 has quit IRC02:27
*** aedan9902 has joined #airshipit03:14
*** aedan9902 has quit IRC03:24
*** aedan1 has joined #airshipit03:28
*** aedan has quit IRC03:31
*** uzumaki has joined #airshipit04:08
*** lemko2 has joined #airshipit04:28
*** lemko has quit IRC04:29
*** lemko2 is now known as lemko04:29
*** aedan9902 has joined #airshipit05:20
*** aedan9902 has quit IRC05:33
*** lemko has quit IRC05:46
*** lemko7 has joined #airshipit05:46
*** aedan9902 has joined #airshipit05:48
*** aedan9902 has quit IRC05:53
*** aedan9902 has joined #airshipit06:06
*** uzumaki has quit IRC06:07
*** aedan9902 has quit IRC06:19
*** aedan1 has quit IRC06:47
*** uzumaki has joined #airshipit06:52
*** dasp has joined #airshipit07:00
*** dasp_ has quit IRC07:01
*** aedan9902 has joined #airshipit07:48
*** aedan9902_1 has joined #airshipit09:04
*** aedan9902 has quit IRC09:04
*** muhaha has joined #airshipit09:11
*** uzumaki has quit IRC11:39
*** muhaha has quit IRC11:51
*** uzumaki has joined #airshipit13:05
*** sreejithp has joined #airshipit14:40
*** uzumaki has quit IRC14:40
*** arijitbose_ has joined #airshipit14:45
*** arijitbose_ has quit IRC14:45
*** aedan9902_1 has quit IRC14:46
*** arijitbose has joined #airshipit14:47
*** SRao has joined #airshipit16:02
airship-irc-bot1<alexander.hughes> hitting docker pull rate limits again in airshipctl, are the images not being cached/are we not using the zuul cache?  https://zuul.opendev.org/t/openstack/build/9f8cd3f32d0745cfa6993a308b7f7ad316:21
clarkbdocker subverted our cache16:24
clarkbthe way our caching works is that we cache the image blobs (the image layer data essentially). Before ~novemeber docker hub rate limited blob downloads which makes sense since they represent the bulk of the data transfer. We were good citizens and cached them and avoided rate limiting. When they changed their rate limits the major change they made was to stop rate limiting blobs and instead rate limit16:25
clarkbmanifests16:25
clarkbour cache does not currently cache manifests because you have to be authenticated to fetch them and apache's cache layer refuses to cache things with authentication headers (even if the cache-control header says the data is public and cacheable)16:26
clarkb(and yes even if fetching anonymously you have to create an auth token for the anonymous fetch so from the http layer's perspective it is all authenticated even if that doesn't imply any real authorization)16:26
clarkbfrom opendev's own job perspective we seem to avoid being rate limited most of the time. We appear to struggle the most in clouds that NAT ipv4 (which makes sense as we'll funnel all ipv4 traffic through fewer addrs and docker hub does not do ipv6)16:28
clarkbif the problem presists or worsens we likely need to look at alternatives. One thought is that squid can likely be made to cache the manifests in addition to the blobs as it can likely be told to honor the cache-control settings for authenticated requests16:30
clarkbdocker-registry itself is often mentioned, but the issue there is it doesn't seem to have the ability to do online pruning of its cache set. However, the docs are a bit conflicted on this subject and maybe testing will reveal it works properly16:33
airship-irc-bot1<alexander.hughes> so this is a common issue, though seemingly infrequent, across all of opendev - and the potential alternatives are being explored across opendev not at project levels?16:36
clarkbwell it is an issue for any users of docker hub due to their rate limits16:36
clarkbincluding moby's own CI aiui :)16:36
clarkbexplored is probably a bit strong. We've identified some avenues that could be pursued but no one has volunteered to take them further at this point that I know of16:37
*** SRao has quit IRC16:37
airship-irc-bot1<alexander.hughes> I see, is the brainstorming session and signup list public that I can watch for developments?16:38
clarkbit has come up in a couple of our weekly team meetings and been discussed there. We publsih an agenda here https://wiki.openstack.org/wiki/Meetings/InfraTeamMeeting and meet at 19:00UTC Tuesdays in #opendev-meeting on freenode16:39
clarkb(this issue isn't currently on the agenda but could be readded as necessary)16:40
clarkbif people would prefer a more asynchronous communication on the topic starting a thread at service-discuss@lists.opendev.org would be a reasonable appraoch16:40
airship-irc-bot1<alexander.hughes> that's fair, thanks :slightly_smiling_face:16:46
clarkblargely at this point I think it needs someone interested in addressing it to figure out if squid or docker-registry or something else can be made to work, and then work with us to update the config management for our mirror nodes to deploy that alternative16:47
airship-irc-bot1<rishabh.k.jain> Hi, Can I get you few more core reviews. Got one +2. Almost there :slightly_smiling_face:16:55
*** uzumaki has joined #airshipit17:18
airship-irc-bot1<rishabh.k.jain> Hi, Can I get some more reviews here.  Thank you :slightly_smiling_face: https://review.opendev.org/c/airship/airshipctl/+/772425 https://review.opendev.org/c/airship/airshipctl/+/77183917:20
airship-irc-bot1<ratnopam.chakrabarti> Is airship CI gate non-functional today? https://jenkins.nc.opensource.att.com/ seems not accessible20:19
airship-irc-bot1<ratnopam.chakrabarti> It's back up now. Thanks Siraj.20:52
*** uzumaki has quit IRC21:06
*** muhaha has joined #airshipit22:11
*** muhaha has quit IRC23:11

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!