Tuesday, 2020-07-21

*** openstack has joined #opendev-meeting07:30
*** ChanServ sets mode: +o openstack07:30
*** hamalq has joined #opendev-meeting16:27
*** hamalq has quit IRC16:28
*** hamalq has joined #opendev-meeting16:29
*** hamalq has quit IRC17:16
*** hamalq has joined #opendev-meeting17:16
clarkbmeeting time now19:00
clarkbwe'll get started in a minute or two19:00
ianwo/19:01
clarkb#startmeeting infra19:01
openstackMeeting started Tue Jul 21 19:01:33 2020 UTC and is due to finish in 60 minutes.  The chair is clarkb. Information about MeetBot at http://wiki.debian.org/MeetBot.19:01
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.19:01
*** openstack changes topic to " (Meeting topic: infra)"19:01
*** zbr|rover has joined #opendev-meeting19:01
openstackThe meeting name has been set to 'infra'19:01
zbr|rovero/19:01
corvuso/19:02
clarkb#link http://lists.opendev.org/pipermail/service-discuss/2020-July/000058.html Our Agenda19:02
clarkb#topic Announcements19:02
*** openstack changes topic to "Announcements (Meeting topic: infra)"19:02
clarkbOpenDev virtual event #2 happening July 20-2219:03
clarkbThis event is happening. The upgraded version of etherpad seems to be holding up just fine19:04
clarkb#topic Actions from last meeting19:04
*** openstack changes topic to "Actions from last meeting (Meeting topic: infra)"19:04
clarkb#link http://eavesdrop.openstack.org/meetings/infra/2020/infra.2020-07-14-19.01.txt minutes from last meeting19:04
clarkbNo actions recorded19:05
clarkb#topic Specs approval19:05
*** openstack changes topic to "Specs approval (Meeting topic: infra)"19:05
clarkb#link https://review.opendev.org/#/c/731838/ Authentication broker service19:05
clarkbagain not quite ready for approval, but definitely available for feedback19:05
clarkbfungi: ^ anything else to add on this? You saw my feedback?19:06
fungiyep, thanks for reviewing that, will incorporate into the next revision19:09
clarkb#topic Priority Efforts19:10
*** openstack changes topic to "Priority Efforts (Meeting topic: infra)"19:10
clarkb#topic Update Config Management19:10
*** openstack changes topic to "Update Config Management (Meeting topic: infra)"19:10
clarkbZuul and Nodepool are running on containers now with the exception of nb0319:11
clarkbnb03 runs on an arm64 host so needs an arm64 image19:12
clarkbI've collected a number of arm64 container image build fixes for nodepool in this change https://review.opendev.org/#/c/741942/19:12
clarkblatest problem is that cryptography did a release between the time we had working wheel cache setup on cryptography 2.9.2 and vhd-util ppa being fixed so now there is an uncached cryptography 3.0.0 and we try to build that on buildx and timeout19:13
corvusping me if you need me here; i'm working on zuul emergency restart19:13
clarkbianw: ^ we expect that mirror to update periodically right? any idea how soon we should have a new wheel for cryptography?19:13
clarkbbut I think ocne that happens we can land that change then we will have an image and can start looking at updating nb0319:14
ianwyes, wheels *should* update daily, however, i had a look and there were network issues the other day19:15
ianwkevinz fiddled something with routers in the cloud, and i haven't looked since.  so i'll get back to it and see -- but the jobs couldn't get a reliable ipv4 connection and so afs was just not happy19:16
clarkbgot it, in any case that seems to be the current issue and so getting the wheel cache updated would be helpful19:16
clarkbRelated to services running in containers we've just discovered that docker-compose up -d doesn't pull new images if it already has images but they are out of date19:17
clarkbsomething to be aware of and maybe something we'll address in our playbooks19:17
ianwone thing is that the release job only releases if *all* the wheel builds pass ... i'll look at that.  it might have just been done like that before we could do something like a semaphore19:17
clarkbianw: if we're able to safely copy out successful builds doing partial updates seems fine?19:17
clarkbI mean if we don't have new A or B package we'll try to  build both in the downstream jobs. If we have only A or B, we'll try to build the other and that is still a net win time wise19:18
clarkbif we want different versions that needs to be controlled by requirements or constraints19:18
ianwyeah, there's no comments that suggest it was done for particular consistency reasons19:18
clarkbhttp://lists.openstack.org/pipermail/openstack-discuss/2020-July/016022.html is also related to updating config management19:20
clarkbI'ev sent a response and approved on of the changes. But more input on the general goal there would be good. The mailing list would probably be best for that so that Javier sees it too though19:20
clarkb#topic OpenDev19:21
*** openstack changes topic to "OpenDev (Meeting topic: infra)"19:21
clarkb#link http://lists.opendev.org/pipermail/service-discuss/2020-July/000057.html Advisory Board welcomed.19:21
clarkbI think that mostly makes the advisory board and its membership official19:22
clarkbI've encouraged our volunteers to get involved and we'll see where it takes us19:22
fungiianw: possibly related to network issues, but sslcheck is also saying for the past couple of days that the mirror cert there is is expiring unexpectedly soon19:22
ianwfungi: ok, will look19:22
clarkb#link http://lists.opendev.org/pipermail/service-announce/2020-July/000007.html Gerrit /p/ mirror deprecation.19:22
clarkbThis is another email I wrote. With plan to get ahead of gerrit repurposing /p/ for project dashboards instead of git mirrors19:23
clarkbthis simplifies the number of locations we need to replicate and makes branch management simpler19:23
clarkband since it will happen when we update gerrit anyway we may as well do it now and get those other wins :)19:23
clarkbI'll propose a change to make those urls 403 when I get a momement, but I have about a week and a half19:24
clarkband I'll go ping the cinder channel too as they seem to be the bulk of the users of that old path19:25
clarkbAnything else OpenDev related to bring up?19:25
clarkb#topic General Topics19:26
*** openstack changes topic to "General Topics (Meeting topic: infra)"19:26
fungithe openstack-infra ml is now closed19:26
* fungi wasn't quick enough19:26
clarkbfungi: oh ya, thank you for doing that19:26
funginp19:26
clarkb#topic Bup and Borg Backups19:26
*** openstack changes topic to "Bup and Borg Backups (Meeting topic: infra)"19:26
clarkbianw: for Bup I was curious if you had success doing a restore from the hosts that had their local indexes cleaned up.19:27
clarkband for Borg I think it would probably be good to have a short intro to your thoughts/plan around it19:27
ianwahhh, yes, i didn't get to that restore.  i will loop back on that19:28
ianwmostly because i started looking at a new backup server, and it seems, as we've discussed before, bup is effectively dead19:28
ianwthere's no python3 support, and it doesn't seem to be coming unfortunately, and it's dropped from focal19:29
ianwso i had a serious look at rdiff-backup and borg; both are very close to bup in terms of the hosts backing themsevles up to a central location and deduping on the server side19:29
ianwborg seemed to be more active, had clarkb's approval, and had a lot of other features19:30
fungithe clarkb seal of approval19:30
ianw#link https://review.opendev.org/74136619:30
clarkb(ya I use borg locally, I've not had to use it in an emergency yet but seems to have a number of good features like append only support, encryption at rest if we want it, fuse mounts for restoration)19:30
ianwso that is the roles to do borg backups19:30
ianwi'd suggest, if we're happy to move on with it, we bring up a borg backup server and switch in a ... lesser value host (maybe not start with review i mean) ... and start from there to get a bit of experience19:31
clarkbI like that idea19:32
fungiseems we're backing up review-dev19:32
clarkbalso we potentially get the ability to prune append only backups?19:32
fungior we were anyway19:32
clarkbnot sure how effective that will be but that could be a great feature19:32
ianwappend-only is implemented in above -- it does seem that we could run jobs on the backup server to then prune repositories19:33
ianwso clients can't delete their history (restricted ssh command), but we can on the server side19:33
clarkband in reviewing the change this is implemented completely to the side of bup so we could switch a host over with little pain I expect?19:35
clarkbbasically add it to borg backups, let it backup with borg, check things, then disable bup ?19:35
ianwyes, i deliberately kept them totally separate, with separate group names etc. so they can run completely in parallel19:35
fungithanks, wise plan19:36
ianwthat's more or less it; if we like it, i'm happy to move on with starting the server and initial backup runs (as mentioend eview-dev seems a good place to start)19:37
corvus++19:38
clarkbI think I'm ok with it, but corvus would be a good source of feedback too having built the bup stuff19:39
clarkbI'll review the latest ps looks like some of my feedback was addressed19:39
clarkb#topic Project Renames19:39
*** openstack changes topic to "Project Renames (Meeting topic: infra)"19:39
clarkbLast week we pencilled in Friday for project renames. I think I'm going to be in a reasonable spot to do that still. fungi are you still able to help?19:40
fungii am indeed19:40
fungistill wide open for friday19:40
clarkbgreat, should we say ~15:00 UTC on friday for that? I've been having ealry days with opendev event happening so keeping to that schedule seems fine19:40
clarkband thursday ish we can curate an etherpad and the chagnes and make sure we are ready19:41
fungii'm good with 1500z19:41
clarkbgreat. I can sent an email about that to service-announce today after lunch19:42
clarkb#topic Server Upgrades19:43
*** openstack changes topic to "Server Upgrades (Meeting topic: infra)"19:43
clarkbfungi: anything new on wiki side of things? I don't expect so but didn't want to leave it out if there is19:43
fungizilch19:44
clarkb#topic Open Discussion19:44
*** openstack changes topic to "Open Discussion (Meeting topic: infra)"19:44
clarkbThat was it for our scheduled agenda. Anything else to bring up?19:44
clarkbI guess I should mention that https://review.opendev.org/#/c/741277/ is the next thing in my series of branch management changes. Land that should be safe and it won't be used until we tag the library. https://review.opendev.org/741279 tests it19:45
clarkbSounds like that may be it? Thank you everyone. I know it was a somewhat distracted meeting. See you next week.19:49
clarkb#endmeeting19:49
*** openstack changes topic to "Incident management and meetings for the OpenDev sysadmins; normal discussions are in #opendev"19:49
openstackMeeting ended Tue Jul 21 19:49:24 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)19:49
openstackMinutes:        http://eavesdrop.openstack.org/meetings/infra/2020/infra.2020-07-21-19.01.html19:49
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/infra/2020/infra.2020-07-21-19.01.txt19:49
openstackLog:            http://eavesdrop.openstack.org/meetings/infra/2020/infra.2020-07-21-19.01.log.html19:49
fungithanks clarkb!19:49

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!