Thursday, 2015-10-08

*** openstackgerrit has quit IRC00:01
*** openstackgerrit has joined #openstack-ansible00:01
*** Bjoern_ has quit IRC00:04
*** sdake_ has joined #openstack-ansible00:11
*** sdake has quit IRC00:11
*** phalmos has joined #openstack-ansible00:12
*** phalmos has quit IRC00:31
*** harlowja has quit IRC00:44
*** tlian2 has quit IRC00:50
*** harlowja has joined #openstack-ansible00:59
*** tlian has joined #openstack-ansible01:06
*** agireud has quit IRC01:38
*** fandi has joined #openstack-ansible01:46
*** agireud has joined #openstack-ansible01:56
*** javeriak has joined #openstack-ansible02:00
*** javeriak has quit IRC02:05
*** sdake_ is now known as sdake02:15
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implementation of keepalived for haproxy  https://review.openstack.org/21881802:16
*** markvoelker has joined #openstack-ansible02:20
*** markvoelker_ has joined #openstack-ansible02:23
*** markvoelker has quit IRC02:25
*** sdake has quit IRC02:30
*** tlian has quit IRC02:37
*** markvoelker has joined #openstack-ansible02:44
*** markvoelker_ has quit IRC02:47
openstackgerritMerged openstack/openstack-ansible: Make bootstrap-ansible script compatible with RHEL  https://review.openstack.org/23216502:48
openstackgerritMerged openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/22978602:49
*** k_stev has joined #openstack-ansible02:49
*** k_stev has quit IRC02:59
*** sdake has joined #openstack-ansible03:02
*** darrenc is now known as darrenc_afk03:08
*** javeriak has joined #openstack-ansible03:09
*** markvoelker has quit IRC03:25
*** darrenc_afk is now known as darrenc03:34
*** markvoelker has joined #openstack-ansible03:38
*** markvoelker has quit IRC03:44
*** markvoelker has joined #openstack-ansible03:47
*** markvoelker_ has joined #openstack-ansible03:49
*** markvoelker_ has quit IRC03:52
*** markvoelker has quit IRC03:52
*** fawadkhaliq has joined #openstack-ansible03:55
*** javeriak has quit IRC03:58
*** galstrom_zzz is now known as galstrom04:06
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implementation of keepalived for haproxy  https://review.openstack.org/21881804:08
*** markvoelker has joined #openstack-ansible04:22
*** markvoelker has quit IRC04:27
*** galstrom is now known as galstrom_zzz04:35
*** markvoelker has joined #openstack-ansible04:37
*** markvoelker has quit IRC04:43
*** markvoelker has joined #openstack-ansible04:44
*** markvoelker has quit IRC04:53
*** jwagner is now known as jwagner_away04:55
*** markvoelker has joined #openstack-ansible05:03
*** markvoelker has quit IRC05:08
*** markvoelker has joined #openstack-ansible05:18
*** markvoelker has quit IRC05:22
*** markvoelker has joined #openstack-ansible05:32
*** markvoelker has quit IRC05:37
*** markvoelker has joined #openstack-ansible05:47
*** markvoelker has quit IRC05:52
*** javeriak has joined #openstack-ansible06:01
*** markvoelker has joined #openstack-ansible06:02
*** markvoelker has quit IRC06:08
*** javeriak has quit IRC06:18
*** manikanta has joined #openstack-ansible06:30
*** javeriak has joined #openstack-ansible06:31
*** javeriak has quit IRC06:31
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107806:40
*** markvoelker has joined #openstack-ansible06:46
*** markvoelker has quit IRC06:50
*** markvoelker has joined #openstack-ansible06:59
*** elo1 has joined #openstack-ansible06:59
*** elo has quit IRC07:01
*** markvoelker has quit IRC07:04
*** shausy has joined #openstack-ansible07:10
*** markvoelker has joined #openstack-ansible07:14
*** javeriak has joined #openstack-ansible07:15
*** markvoelker has quit IRC07:18
*** fawadkhaliq has quit IRC07:20
*** javeriak has quit IRC07:27
*** markvoelker has joined #openstack-ansible07:28
openstackgerritJesse Pretorius proposed openstack/openstack-ansible-security: Add bashate tox configuration  https://review.openstack.org/23238507:33
*** markvoelker has quit IRC07:33
*** javeriak has joined #openstack-ansible07:34
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/23238707:37
*** javeriak_ has joined #openstack-ansible07:37
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Added LC_ALL to openrc  https://review.openstack.org/23238807:38
*** javeriak has quit IRC07:38
*** neilus has quit IRC07:40
*** markvoelker has joined #openstack-ansible07:43
*** fawadkhaliq has joined #openstack-ansible07:44
*** openstackstatus has quit IRC07:47
*** openstackstatus has joined #openstack-ansible07:47
*** ChanServ sets mode: +v openstackstatus07:47
*** markvoelker has quit IRC07:48
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update kilo for new dev work - 8 Oct 2015  https://review.openstack.org/23239307:51
*** subscope has joined #openstack-ansible07:54
openstackgerritMerged openstack/openstack-ansible: Add novnc console support  https://review.openstack.org/22819707:55
*** markvoelker has joined #openstack-ansible07:58
openstackgerritMerged openstack/openstack-ansible: Install spice-html5 from source  https://review.openstack.org/22646207:59
*** persia has quit IRC07:59
*** persia has joined #openstack-ansible08:00
*** gparaskevas has joined #openstack-ansible08:01
tiagogomes_cloudnull, I see. Probably the recommended number of members in a cluster and what to do if the the cluster only has two should be documented if not already :)08:02
*** markvoelker has quit IRC08:02
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Archive Keystone to Keystone Federation rst content  https://review.openstack.org/21174708:11
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Documentation: Syntax checking before running playbooks  https://review.openstack.org/23188808:11
*** gparaskevas has quit IRC08:12
*** neilus has joined #openstack-ansible08:21
*** markvoelker has joined #openstack-ansible08:26
*** markvoelker has quit IRC08:31
*** markvoelker has joined #openstack-ansible08:40
*** markvoelker has quit IRC08:46
*** gparaskevas has joined #openstack-ansible08:47
*** kukacz has joined #openstack-ansible08:51
*** markvoelker has joined #openstack-ansible08:55
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update all SHA's (except Horizon) to Liberty branch SHA's  https://review.openstack.org/22838508:55
*** markvoelker has quit IRC08:59
*** markvoelker has joined #openstack-ansible09:03
*** shausy has quit IRC09:06
*** shausy has joined #openstack-ansible09:06
*** markvoelker has quit IRC09:08
*** markvoelker has joined #openstack-ansible09:10
*** fawadkhaliq has quit IRC09:13
*** markvoelker has quit IRC09:15
*** tlian has joined #openstack-ansible09:16
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update all SHA's to Liberty branch SHA's  https://review.openstack.org/22838509:20
openstackgerritMerged openstack/openstack-ansible: Documentation: Syntax checking before running playbooks  https://review.openstack.org/23188809:29
*** phalmos has joined #openstack-ansible09:33
*** phalmos has quit IRC09:35
*** phalmos has joined #openstack-ansible09:36
*** markvoelker has joined #openstack-ansible09:40
*** ompp has joined #openstack-ansible09:42
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Archive Keystone to Keystone Federation rst content  https://review.openstack.org/21174709:43
*** markvoelker has quit IRC09:45
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Documentation: Syntax checking before running playbooks  https://review.openstack.org/23244309:45
*** markvoelker has joined #openstack-ansible09:55
*** markvoelker has quit IRC09:59
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update kilo for new dev work - 8 Oct 2015  https://review.openstack.org/23239310:04
*** markvoelker has joined #openstack-ansible10:04
*** markvoelker has quit IRC10:09
*** fawadkhaliq has joined #openstack-ansible10:13
*** fawadkhaliq has quit IRC10:18
*** markvoelker has joined #openstack-ansible10:19
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107810:20
*** markvoelker has quit IRC10:24
*** harvy has joined #openstack-ansible10:24
*** persia has quit IRC10:26
*** persia has joined #openstack-ansible10:27
odyssey4memattt can you please review https://review.openstack.org/228385 - it's time we updated the liberty sha's10:30
*** markvoelker has joined #openstack-ansible10:33
*** javeriak_ has quit IRC10:35
*** markvoelker has quit IRC10:38
*** sdake has quit IRC10:41
matttodyssey4me: yep gimme a minute10:42
*** fawadkhaliq has joined #openstack-ansible10:45
*** javeriak has joined #openstack-ansible10:45
*** markvoelker has joined #openstack-ansible10:47
*** phalmos has quit IRC10:52
*** markvoelker has quit IRC10:55
odyssey4memattt replied to your question :)10:58
*** shausy has quit IRC10:58
*** shausy has joined #openstack-ansible10:58
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone to Liberty RC1  https://review.openstack.org/22691710:59
*** markvoelker has joined #openstack-ansible11:02
*** markvoelker has quit IRC11:12
*** markvoelker has joined #openstack-ansible11:17
*** markvoelker has quit IRC11:24
*** markvoelker has joined #openstack-ansible11:32
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Added LC_ALL to openrc  https://review.openstack.org/23238811:33
*** shausy has quit IRC11:34
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Limit the number of Ansible forks used to 10  https://review.openstack.org/23238711:34
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Break apart and document the upgrade process  https://review.openstack.org/22413711:35
*** shausy has joined #openstack-ansible11:35
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update rabbitmq-server to v3.5.5-3  https://review.openstack.org/23187111:35
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23109011:36
*** markvoelker has quit IRC11:36
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Remove unused libvirt-bin file  https://review.openstack.org/23108411:37
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Use inventory instead of hostfile parameter  https://review.openstack.org/23187011:38
*** davidself has joined #openstack-ansible11:40
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf  https://review.openstack.org/23215411:41
tiagogomes_mm, does cinder-api really need access to the storage network?11:42
tiagogomes_by default it has11:42
odyssey4metiagogomes_ possibly not - I would expect that cinder-volume may need to talk on the storage network but the api service should only interact with cinder-volume11:45
*** markvoelker has joined #openstack-ansible11:47
*** markvoelker has quit IRC11:51
tiagogomes_actually I think that my storage network is not being used, as I can't see anything on tcpdump11:52
*** markvoelker has joined #openstack-ansible11:57
*** cloudtrainme has joined #openstack-ansible11:58
odyssey4metiagogomes_ are you using swift?11:58
odyssey4mealso, do you have any instances running with volumes attached?11:58
tiagogomes_odyssey4me I am not. Yes I have volumes attached. Shoudln't my_ip on cinder.conf for cinder-volume be on the storage network?11:59
*** markvoelker has quit IRC12:01
odyssey4metiagogomes_ is cinder-volume running in a container, or on the storage hst?12:01
odyssey4me*host12:01
tiagogomes_storage host, I read it couldn't be on a container when using iscsi as backend12:02
odyssey4metiagogomes_ well, it can - but it's better for it not to be12:02
tiagogomes_:)12:02
odyssey4meok, what address does it have?12:02
tiagogomes_it has the public address of the machine :(12:02
*** markvoelker has joined #openstack-ansible12:03
odyssey4metiagogomes_ hmm, well unfortunately I don't know enough about that code path to know how it determines it12:04
*** javeriak has quit IRC12:04
*** javeriak has joined #openstack-ansible12:04
odyssey4meI see that it uses 'container_address' by default, but you can override it using 'cinder_storage_address'12:04
odyssey4memattt do you perhaps know how this is supposed to work?12:06
tiagogomes_yep, I'll try that12:06
odyssey4metiagogomes_ my only concern would be that the variable should be set for the host in openstack_user_config - not in user_variables12:07
odyssey4meuser_variables will set the same value for all hosts, whereas in openstack_user_config you can set it per host12:07
*** markvoelker has quit IRC12:08
tiagogomes_but I think the default should be something like {% my_ip = hostvars[inventory_hostname][storage_bridge]['ipv4']['address'] %}12:10
tiagogomes_if there is a storage bridge12:10
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone to Liberty RC1  https://review.openstack.org/22691712:10
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty  https://review.openstack.org/22691712:11
tiagogomes_argh, my_ip for nova compute is also a public IP address12:11
tiagogomes_not good12:11
*** markvoelker has joined #openstack-ansible12:12
*** metral is now known as metral_zzz12:13
*** markvoelker has quit IRC12:16
*** woodard has joined #openstack-ansible12:17
*** ompp has quit IRC12:17
*** woodard has quit IRC12:27
*** woodard has joined #openstack-ansible12:28
*** cloudtrainme has quit IRC12:30
openstackgerritMerged openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf  https://review.openstack.org/23218312:39
openstackgerritMerged openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23107812:39
*** markvoelker has joined #openstack-ansible12:41
*** markvoelker has quit IRC12:45
*** markvoelker has joined #openstack-ansible12:46
odyssey4memattt can you please review https://review.openstack.org/232393 - it unwedges the kilo gate :)12:47
*** markvoelker has quit IRC12:49
*** markvoelker has joined #openstack-ansible12:49
*** markvoelker has quit IRC12:50
*** markvoelker has joined #openstack-ansible12:50
matttodyssey4me: sure looking now12:51
*** javeriak has quit IRC12:52
*** woodard has quit IRC12:58
*** manikanta has quit IRC12:59
*** woodard has joined #openstack-ansible12:59
*** jaypipes has joined #openstack-ansible13:08
*** markvoelker_ has joined #openstack-ansible13:11
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add minor upgrade documentation to the install guide  https://review.openstack.org/23252213:11
*** markvoelker has quit IRC13:12
*** scarlisle has joined #openstack-ansible13:12
*** javeriak has joined #openstack-ansible13:13
tiagogomes_mm, is my understading correct that the storage network is supposed to be used only for iscsi traffic? cinder-volume will comunicate to the other services using the management network13:19
odyssey4metiagogomes_ yes, that's my understanding13:20
tiagogomes_odyssey4me I set my_ip to the storage network and now it is using the storage network for iscsi traffic :)13:21
*** markvoelker_ has quit IRC13:23
*** pradk has joined #openstack-ansible13:24
*** woodard has quit IRC13:26
tiagogomes_I can't think of a reason then for cinder_api to be in the group_binds for the storage network13:27
*** davidself has quit IRC13:30
*** woodard has joined #openstack-ansible13:31
cloudnullmorning13:32
odyssey4meo/ cloudnull13:33
cloudnulltiagogomes_:  i can think of one either. we should remove that one. all of the API > Volume communication should all be through rabbit13:33
*** cloudtrainme has joined #openstack-ansible13:35
*** kerwin_bai has joined #openstack-ansible13:36
openstackgerritMiguel Alex Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module  https://review.openstack.org/22661713:36
*** markvoelker has joined #openstack-ansible13:38
tiagogomes_any ideas how to set the cinder_storage_address to be the ip address on the storage network13:38
cloudnulltiagogomes_:  also i gave this a go yesterday. to enable neutron l3ha via the neutron service http://cdn.pasteraw.com/a5f4sueqen4kpgtzvq3q7lvrf4ax2f0 it worked quite well.13:38
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Implement a fall back URL for get-pip.py  https://review.openstack.org/23191913:39
tiagogomes_oh, nice to hear13:39
*** spotz_zzz is now known as spotz13:41
*** markvoelker has quit IRC13:43
*** markvoelker has joined #openstack-ansible13:45
*** cloudtrainme has quit IRC13:46
*** k_stev has joined #openstack-ansible13:46
openstackgerritMerged openstack/openstack-ansible-security: Fix typo in documentation for V-38460  https://review.openstack.org/23225613:46
*** KLevenstein has joined #openstack-ansible13:49
*** woodard has quit IRC13:49
*** markvoelker has quit IRC13:50
*** cloudtrainme has joined #openstack-ansible13:50
*** sigmavirus24_awa is now known as sigmavirus2413:50
*** ompp has joined #openstack-ansible13:52
*** markvoelker has joined #openstack-ansible13:53
*** markvoelker has quit IRC13:58
*** fawadkhaliq has quit IRC13:58
*** Mudpuppy has joined #openstack-ansible14:06
*** markvoelker has joined #openstack-ansible14:06
*** Mudpuppy has quit IRC14:06
*** Mudpuppy has joined #openstack-ansible14:07
*** woodard has joined #openstack-ansible14:07
*** gcivitella has joined #openstack-ansible14:08
cloudnulltiagogomes_:  it seems something like this will allow the address of the cinder volume iscsi traffic to be dynamic http://cdn.pasteraw.com/qv0kszdw0jm144az6k5lgh3y5k6m0pb14:08
*** markvoelker_ has joined #openstack-ansible14:08
cloudnullthat would have to be set within the openstack_user_config file14:09
openstackgerritMerged openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf  https://review.openstack.org/23215414:09
cloudnulland some cordination would have to be done to make sure you were using eth2 in the contianer and br-storage on the host but that seems simple enough14:09
tiagogomes_thanks cloudnull, I was struggling to find a way to do that :)14:11
*** markvoelker has quit IRC14:11
cloudnullit may need some refinement but i think itll work14:12
*** alejandrito has joined #openstack-ansible14:12
* cloudnull spinning a new env now to test14:13
tiagogomes_cloudnull somehow the vars in openstack_user_deploy are not overriding the default for cinder_storage_address14:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38624: Rotate logs  https://review.openstack.org/23224014:20
tiagogomes_ah, wait, maybe I need to re-create the inventory?14:20
cloudnulltiagogomes_:  i dont think so14:21
cloudnullhowever ill know more in a couple of mins14:21
tiagogomes_right, /etc/openstack_deploy/openstack_inventory.json has the updated cinder_storage_address14:22
*** javeriak has quit IRC14:24
tiagogomes_cloudnull, I commented out cinder_storage_address defined on os-cinder-install.yml, and now it is overriding14:25
cloudnullhum. so i wonder if we need to set it in user_variables.yml instead to make it a better override14:28
mhaydenmattt: i think i got https://review.openstack.org/#/c/232240/ cleaned up for ya14:29
*** sdake has joined #openstack-ansible14:29
matttmhayden: :thumbsup:14:30
* mhayden woots14:34
mhaydenthanks mattt14:34
*** markvoelker_ has quit IRC14:35
openstackgerritMerged openstack/openstack-ansible-security: V-38624: Rotate logs  https://review.openstack.org/23224014:37
*** kerwin_bai has quit IRC14:38
prometheanfirecloudnull: odyssey4me think I need to figure out how to run the meeting14:39
cloudnullrun: #startmeeting14:40
cloudnullthen hurd the cats14:40
prometheanfirewell, that's the easy part, I need to know the stack of things to go over more than anything14:40
prometheanfiregoing over https://wiki.openstack.org/wiki/Meetings/openstack-ansible14:42
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty  https://review.openstack.org/22996714:45
cloudnullprometheanfire:  thats part of the cat hurding14:46
prometheanfireya14:46
*** k_stev has quit IRC14:47
*** k_stev has joined #openstack-ansible14:53
alextricityHey! What is gate-openstack-ansible-commit-nv?14:53
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty  https://review.openstack.org/22996714:54
cloudnullnone voting gate14:54
alextricityand dsvm-commit?14:55
cloudnullrenamed14:55
cloudnulldevstack virtual machine14:55
*** markvoelker has joined #openstack-ansible14:55
odyssey4memattt gate pass for https://review.openstack.org/23191914:56
alextricityWhat's the difference between the two? Sorry for the lame questions..i'm just a little lost14:56
odyssey4mecloudnull can you also revise your review for https://review.openstack.org/231919 please?14:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3863{3,4,6}: Audit log files  https://review.openstack.org/23257814:56
* cloudnull looking14:57
odyssey4mealextricity the -nv one is non-voting and uses a consistent image between cloud providers - it's also more 'bare' than the dsvm image14:57
odyssey4methe dsvm image is inconsistent between cloud providers14:57
alextricityso the nv one might fail depending on which cloud provider it lands on?14:57
odyssey4mewe are moving towards using the currently -nv one, once it's stable enough for us - so far we're still getting too many failures14:57
cloudnullodyssey4me: +2 from me14:58
odyssey4mealextricity check the -nv one to ensure that you're not missing packages in your apt package list14:58
odyssey4mebut otherwise it's as stable/unstable as the dsvm one :p14:58
*** iraw- has quit IRC14:59
*** fawadkhaliq has joined #openstack-ansible14:59
odyssey4memattt cloudnull would you mind quickly reviewing https://review.openstack.org/232385 for the security repo15:01
odyssey4meit's holding back the addition of tests to the repo15:01
cloudnulldone15:03
*** fawadkhaliq has quit IRC15:04
alextricityodyssey4me: Right now i'm gett "stderr: E: There are problems and -y was used without --force-yes"  only on the nv gate15:05
alextricityThat's when it tried to install the galera packages15:06
odyssey4mealextricity that's odd15:07
openstackgerritMerged openstack/openstack-ansible-security: Add bashate tox configuration  https://review.openstack.org/23238515:07
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Graphical login exceptions  https://review.openstack.org/23259315:16
*** ompp has quit IRC15:19
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty  https://review.openstack.org/22691715:21
tiagogomes_cloudnull, any luck with cinder_storage_address? I can't make it right15:22
cloudnullim working on just that right now :)15:24
tiagogomes_ok :)15:24
*** alejandrito has quit IRC15:25
*** alejandrito has joined #openstack-ansible15:25
*** alop has joined #openstack-ansible15:26
*** javeriak has joined #openstack-ansible15:27
*** woodard has quit IRC15:27
prometheanfiremhayden: you really need to get some sort of test working15:28
mhaydenprometheanfire: odyssey4me has something in the pipe w/infra15:28
prometheanfirecool15:29
*** javeriak has quit IRC15:29
*** javeriak_ has joined #openstack-ansible15:29
odyssey4memhayden prometheanfire https://review.openstack.org/23201515:29
prometheanfirecool, will review, for what it's worth :P15:30
mhaydenthanks, prometheanfire15:30
prometheanfiremhayden: not that my +1s help, but you have them15:31
matttmhayden: is this right?  https://review.openstack.org/#/c/232229/1/doc/source/developer-notes/V-38560.rst15:32
mhaydenmattt: yeah, the docs are identical for both15:32
*** phalmos has joined #openstack-ansible15:33
matttok cool15:33
*** javeriak_ has quit IRC15:33
*** javeriak has joined #openstack-ansible15:34
openstackgerritMerged openstack/openstack-ansible-security: V-38555, V-38560: IPv4 firewalling  https://review.openstack.org/23222915:35
openstackgerritMerged openstack/openstack-ansible-security: V-3854{8,9}, V-38553: IPv6 filtering/security  https://review.openstack.org/23222615:35
openstackgerritMerged openstack/openstack-ansible-security: V-38537: Ignore ICMPv4 bogus error messages  https://review.openstack.org/23220315:36
mhaydenwow, folks -- thanks for the reviews!15:36
mhayden:)15:36
prometheanfiremhayden: I've worked on sec stuff outside of rackspace, so it interests me15:37
tiagogomes_cloudnull, another thing, shouldn't nova_ip have a management IP? Currently it has a public IP. That's not good because my nova hosts only have access to the public internet during deployment, but that will cease once the deployment is done15:37
*** woodard has joined #openstack-ansible15:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3851{8,9}: Log file ownership  https://review.openstack.org/23217115:42
evrardjpmhayden: good job there15:47
mhaydenthanks evrardjp15:47
*** gparaskevas has quit IRC15:47
*** ompp has joined #openstack-ansible15:47
mhaydenprometheanfire: are we okay with a full stop failure in the role? i've been wavering on whether that's a good idea or not15:48
evrardjplike I said last week I can't attend this week meeting, sorry in advance15:48
prometheanfiremhayden: I like errors being errors :P15:48
mhaydenme too15:49
prometheanfireforce people to look at something and fix it15:49
mhaydenokay, i'll remedy 23207015:49
prometheanfiremaybe set an option for 'ignore this'15:49
prometheanfirewhich you already have iirc15:49
prometheanfireso they can run the rest of the checks15:49
matttmhayden: regarding 23207015:51
mhaydenyeah, someone could run with --skip-tag15:52
*** fawadkhaliq has joined #openstack-ansible15:52
mhaydenmattt: yessir?15:52
matttmhayden: could you use file module instead?15:53
matttthink we should limit command/shell where possible15:53
*** shausy has quit IRC15:53
mhaydenmattt: we're talking about --> V-38500: No UID 0 accounts except root <-- ?15:54
matttmhayden: https://review.openstack.org/#/c/232070/1/openstack-ansible-security/tasks/auditd.yml15:54
mhaydenoh that's weird15:54
mhaydeni wonder if that one should have come into another review15:54
mhaydenthat might be an error on my part15:55
prometheanfiremhayden: ok, done reviewing for now :P15:55
matttmhayden: ah you gotz da dupes15:56
mhaydenfixing15:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root  https://review.openstack.org/23207015:57
*** subscope has quit IRC15:58
mhaydenprometheanfire / mattt: ^^ 232070 now fails and also has no auditd dangling tasks :P15:58
prometheanfirecloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, mancdaz, dolphm, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle get in #openstack-meeting-415:58
matttmhayden: typo in https://review.openstack.org/#/c/232070/2/doc/source/developer-notes/V-38500.rst15:58
prometheanfiremhayden: already reviewed15:58
matttmhayden: 'acocunts'15:59
prometheanfirekthnx15:59
mhaydenoopsies15:59
scarlisle.join #openstack-meeting-415:59
scarlisleoops15:59
*** Bjoern_ has joined #openstack-ansible15:59
*** Bjoern_ is now known as BjoernT15:59
cloudnulltiagogomes_: so15:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root  https://review.openstack.org/23207015:59
mhaydentypo fixed ;)15:59
palendaeprometheanfire: rgr16:00
cloudnullthe fastest most configurable way that i was able to set the storage address in all possible causes was like this https://gist.github.com/cloudnull/4edd4c7d3a0e920d478b16:00
palendaeThough it looks like the other meeting has run over16:00
cloudnullwhich was a change in the play16:00
prometheanfireya, kicking them16:00
openstackgerritMerged openstack/openstack-ansible: Update all SHA's to Liberty branch SHA's  https://review.openstack.org/22838516:00
* mhayden has to scurry away :| sorry!16:01
matttmhayden: me too, ttyl !16:01
openstackgerritMerged openstack/openstack-ansible: Small typo correction missing double quote  https://review.openstack.org/23187416:01
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master  https://review.openstack.org/23118716:01
prometheanfireyou have 2 min16:01
openstackgerritMerged openstack/openstack-ansible: Add developer docs entry for using tox  https://review.openstack.org/23187516:01
tiagogomes_cloudnull yeah, I thought it would need a change in the play. What about my_ip for nova?16:02
tiagogomes_you think it is harmful?16:02
cloudnullit might be good to follow the same pattern there too16:04
openstackgerritMerged openstack/openstack-ansible: Implement a fall back URL for get-pip.py  https://review.openstack.org/23191916:04
*** jmccrory_ has joined #openstack-ansible16:04
*** galstrom_zzz is now known as galstrom16:05
openstackgerritKevin Carter proposed openstack/openstack-ansible: Fix to correctly set the cinder_storage_address  https://review.openstack.org/23263716:13
cloudnulltiagogomes_:  ^^16:13
tiagogomes_cloudnull nice, I am going to try the patch16:14
openstackgerritKevin Carter proposed openstack/openstack-ansible: Fix to correctly set the cinder_storage_address  https://review.openstack.org/23263716:15
cloudnullsorry updated to fix a whitespace issue16:15
*** CheKoLyN has joined #openstack-ansible16:17
*** k_stev has quit IRC16:17
cloudnulltiagogomes_: for nova16:18
cloudnulllooks like that is set here https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/os_nova/templates/nova.conf.j2#L9016:18
cloudnullwhich seems like it would lend itself to having something similar done.16:18
tiagogomes_cloudnull yes :)16:19
openstackgerritMiguel Alex Cantu proposed openstack/openstack-ansible: Seperated out Telemetry Alarming (Aodh)[WIP]  https://review.openstack.org/23222416:29
*** jwagner_away is now known as jwagner16:34
*** woodard has quit IRC16:37
*** shausy has joined #openstack-ansible16:37
*** woodard has joined #openstack-ansible16:37
*** phalmos has quit IRC16:42
*** woodard has quit IRC16:42
*** spotz is now known as spotz_zzz16:44
openstackgerritKevin Carter proposed openstack/openstack-ansible: Add novnc console support  https://review.openstack.org/23265716:47
*** agireud has quit IRC16:48
cloudnullscarlisle: whats what on the upgrade bits ?16:49
cloudnullthanks for testing that out btw .16:49
*** agireud has joined #openstack-ansible16:51
*** tiagogomes_ has quit IRC16:51
*** cloudtrainme has quit IRC16:56
*** woodard has joined #openstack-ansible16:57
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf  https://review.openstack.org/23266516:58
*** b3rnard0 is now known as b3rnard0_away16:59
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty  https://review.openstack.org/22691717:00
openstackgerritKevin Carter proposed openstack/openstack-ansible: Fix to correctly set the nova_management_address  https://review.openstack.org/23266617:01
mhaydenprometheanfire / BjoernT: what did i need to do with https://bugs.launchpad.net/openstack-ansible/+bug/1491440 ?17:02
openstackLaunchpad bug 1491440 in openstack-ansible "Restarting containers leads to 'dangling' veth interfaces" [Medium,In progress] - Assigned to Major Hayden (rackerhacker)17:02
mhaydensorry i had stepped away17:02
scarlislecloudnull sorry man, was helping a coworker17:02
*** kukacz has quit IRC17:02
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty  https://review.openstack.org/22691717:03
*** cloudtrainme has joined #openstack-ansible17:03
scarlisleit failed because apt couldn't update its cache :/.  Not really a playbook problem, apt failed to update its apt cache on two computes17:03
openstackgerritKevin Carter proposed openstack/openstack-ansible: Fix to correctly set the cinder_storage_address  https://review.openstack.org/23263717:03
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty  https://review.openstack.org/22996717:03
scarlislere-running the paybook it failed on, I'll let you know17:03
cloudnullscarlisle: is that an issue where the apt repo was not available ?17:04
cloudnullor something along the lines of the apt-https package was not installed ?17:04
*** jwagner is now known as jwagner_lunch17:06
*** jwagner_lunch is now known as jwagner_away17:06
*** woodard has quit IRC17:08
scarlisleI'm not sure17:09
*** abitha has joined #openstack-ansible17:09
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add isolated flag to pip fall back installation  https://review.openstack.org/23266817:10
cloudnullscarlisle: did the failed playbook succeed ?17:12
scarlislecloudnull yes17:12
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Implement a fall back URL for get-pip.py  https://review.openstack.org/23266917:13
scarlisleterminal doesn't scroll back far enough to see why it failed earlier17:13
cloudnullthen i'd chaulk that up to a success as you were able to recover from a transint failure.17:13
cloudnull:)17:13
scarlisleit was on the /galera_client_install task in the galera_client role called by the os-neutron-install.yml playbook17:13
scarlisleoh I agree17:13
scarlislemoving on.  I'll let you know how the rest goes17:15
scarlisleprobably gonna give a +117:15
scarlisleqq, how long do you think before the new dependency is merged?17:16
scarlisleLooks like odyssey4me changed it this morning17:16
odyssey4mescarlisle yeah, kilo was blocked in the gate (where we don't use a frozen repo) due to some dependent lib issues17:17
odyssey4mewe're waiting for the update which fixes that to get through17:17
cloudnulllunching bbl17:19
*** fawadkhaliq has quit IRC17:19
scarlisleodyssey4me got it, thanks17:20
openstackgerritMerged openstack/openstack-ansible-security: V-38579: grub.conf owned by root  https://review.openstack.org/23223717:20
openstackgerritMerged openstack/openstack-ansible-security: V-3865{2,4}, V-57569: Mounting filesystems  https://review.openstack.org/23225417:21
openstackgerritMerged openstack/openstack-ansible-security: V-38528: Log martian packets  https://review.openstack.org/23220117:21
openstackgerritMerged openstack/openstack-ansible-security: V-3852*, V-3853*, V-3854*: IPv4 restrictions  https://review.openstack.org/23219617:21
openstackgerritMerged openstack/openstack-ansible-security: V-3852{0,1}: Back up log/audit records  https://review.openstack.org/23217817:21
openstackgerritMerged openstack/openstack-ansible-security: Graphical login exceptions  https://review.openstack.org/23259317:21
openstackgerritMerged openstack/openstack-ansible-security: V-3863{3,4,6}: Audit log files  https://review.openstack.org/23257817:21
*** subscope has joined #openstack-ansible17:25
*** javeriak has quit IRC17:26
odyssey4memhayden nice! http://lists.openstack.org/pipermail/openstack-dev/2015-October/076478.html17:40
mhaydenodyssey4me: i'm in their meeting right now!17:40
mhaydenthey all want to jump in17:41
odyssey4methat looks friggin awesome :)17:41
openstackgerritMerged openstack/openstack-ansible: Update kilo for new dev work - 8 Oct 2015  https://review.openstack.org/23239317:44
odyssey4me\o/17:45
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix bashate violations  https://review.openstack.org/23109017:46
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Remove unused libvirt-bin file  https://review.openstack.org/23108417:46
*** fawadkhaliq has joined #openstack-ansible17:48
*** woodard has joined #openstack-ansible17:52
*** woodard has quit IRC17:56
*** kukacz has joined #openstack-ansible17:57
*** Mudpuppy has quit IRC17:59
*** kukacz has quit IRC18:00
*** kukacz has joined #openstack-ansible18:00
*** ompp has quit IRC18:03
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add novnc console support  https://review.openstack.org/23265718:05
*** spotz_zzz is now known as spotz18:07
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Install spice-html5 from source  https://review.openstack.org/23269718:08
*** gcivitella has quit IRC18:13
*** k_stev has joined #openstack-ansible18:16
*** k_stev has quit IRC18:16
*** k_stev has joined #openstack-ansible18:16
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add isolated flag to pip fall back installation  https://review.openstack.org/23266818:17
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Implement a fall back URL for get-pip.py  https://review.openstack.org/23266918:17
*** jwagner_away is now known as jwagner18:17
*** k_stev1 has joined #openstack-ansible18:21
*** k_stev has quit IRC18:21
*** k_stev has joined #openstack-ansible18:23
*** k_stev1 has quit IRC18:25
*** phalmos has joined #openstack-ansible18:27
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf  https://review.openstack.org/23266518:29
*** ompp has joined #openstack-ansible18:34
*** b3rnard0_away is now known as b3rnard018:35
*** Mudpuppy has joined #openstack-ansible18:35
*** Mudpuppy has quit IRC18:36
BjoernTmhayden: We're all good in regards to https://bugs.launchpad.net/openstack-ansible/+bug/1491440, we were not sure about the state of this bug at first. But figured it out later.18:36
openstackLaunchpad bug 1491440 in openstack-ansible "Restarting containers leads to 'dangling' veth interfaces" [Medium,In progress] - Assigned to Major Hayden (rackerhacker)18:36
*** Mudpuppy has joined #openstack-ansible18:36
*** javeriak has joined #openstack-ansible18:40
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty  https://review.openstack.org/22691718:46
*** woodard has joined #openstack-ansible18:47
*** agireud- has joined #openstack-ansible18:48
*** agireud has quit IRC18:49
*** agireud- is now known as agireud18:49
*** woodard has quit IRC18:52
*** k_stev has quit IRC18:53
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix run-aio-build.sh for curl one-liner  https://review.openstack.org/23185718:53
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Fix run-aio-build.sh for curl one-liner  https://review.openstack.org/23185718:53
*** KLevenstein has quit IRC18:59
*** gparaskevas has joined #openstack-ansible19:00
*** KLevenstein has joined #openstack-ansible19:01
*** k_stev has joined #openstack-ansible19:01
gparaskevasHello there, i am trying to install openstack again with ceph enabled, i have already ceph installed and created the clients and pools, but when it come to cinder it fail because no UUiD is defined19:04
gparaskevaswhat am i missing19:04
gparaskevas?19:04
gparaskevasshould i just generate one?19:06
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master  https://review.openstack.org/23118719:11
cloudnullandymccr, git-harry, mattt: ^^ would know19:16
cloudnullgparaskevas: ^19:16
cloudnullgparaskevas:  poking around19:21
cloudnulllooks like you need to add cinder_ceph_client_uuid to the  /etc/openstack_deploy/user_secrets.yml19:21
cloudnulland then run ./scripts/pw-token-gen.py to generate the new entry19:21
*** woodard has joined #openstack-ansible19:22
cloudnullin the rpc-openstack repo thats what they've done https://github.com/rcbops/rpc-openstack/pull/380/files19:22
*** BjoernT has quit IRC19:25
*** Bjoern_ has joined #openstack-ansible19:29
alextricityHello again :) Anybody know of a bug that would prevent me from managing project members from horizon? This is on a base OSD deployment19:44
*** ashishjain has joined #openstack-ansible19:47
ashishjainhello19:48
ashishjainI am seeing 404 not found for mirror.rackspace.com19:49
ashishjainIs this repo  down?19:49
bgmccollumhttp://downforeveryoneorjustme.com/mirror.rackspace.com -- gives the thumbs up19:51
ashishjainbgmccollum: Indeed hitting through browser I see its up19:52
bgmccollumashishjain: what specify URL is giving you a 404?19:53
ashishjainBut when I add the same to ubuntu sources.list I see it fails. I see failure when running the hosts setup playbook19:53
cloudnullalextricity: is it preventing you from managing them ?19:53
ashishjainhere is one of them  Failed to fetch http://mirror.rackspace.com/dists/trusty/main/binary-amd64/Packages  404  Not Found19:53
gparaskevascloudnull: yeah i figured it out :P thanks!19:54
cloudnullashishjain:  its missing the distro in that URL19:54
cloudnullIE https://mirror.rackspace.com/ubuntu/dists/trusty/main/19:54
cloudnullashishjain:  this seems to work19:55
cloudnullhttp://mirror.rackspace.com/ubuntu/dists/trusty/main/binary-amd64/19:55
cloudnullgparaskevas:  great!19:55
ashishjaincloudnull: Err https://mirror.rackspace.com trusty/main amd64 Packages19:55
cloudnullsorry it took a bit to get that answer back to you .19:55
cloudnullashishjain: maybe the local mirror is resync'ing in your area?19:56
cloudnullbecause https://mirror.rackspace.com/ubuntu/dists/trusty/main/binary-amd64/ works for me19:57
ashishjaincloudnull: for me everything is failing19:57
ashishjainW: Failed to fetch https://mirror.rackspace.com/dists/trusty-security/multiverse/binary-amd64/Packages  HttpError404  W: Failed to fetch https://mirror.rackspace.com/dists/trusty-security/main/binary-i386/Packages  HttpError40419:57
cloudnullthose URLs are missing the distro19:58
ashishjaincloudnull: can you please advice if I can use ubuntu repo instead of rackspace repos for osad?19:58
cloudnullhttps://mirror.rackspace.com/ubuntu/dists/trusty-security/multiverse/binary-amd64/19:58
cloudnullashishjain:  you can change the repos for osad to something more local or better suited for your needs.19:59
ashishjaincloudnull: one more thing as you said  this url "https://mirror.rackspace.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages"  indeed does not exist20:00
ashishjainwhy is osad looking for this url than?20:00
ashishjaininstead this exists https://mirror.rackspace.com/ubuntu/dists/trusty/restricted/binary-amd64/20:00
ashishjainwhy is packages being appended in the url?20:01
cloudnullit would be https://mirror.rackspace.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages.gz or https://mirror.rackspace.com/ubuntu/dists/trusty/restricted/binary-amd64/Packages.bz220:01
cloudnullwhere is it failing ?20:01
cloudnullwhat task ?20:01
ashishjaincloudnull: setup-hosts.yml20:02
*** Mudpuppy_ has joined #openstack-ansible20:02
cloudnullwhere in that meta play ?20:03
*** jmccrory_ has quit IRC20:03
ashishjaincloudnull: shall I paste it here or create a paste20:05
cloudnulli'd asume it was somewhere in lxc_hosts  ?20:05
*** Mudpuppy has quit IRC20:05
cloudnullcreate a paste would be best20:05
ashishjainokay20:05
gparaskevascloudnull: now i am facing somthing weird, -> http://pastebin.com/RghX4Bzd20:05
ashishjaincloudnull:http://paste.openstack.org/show/475789/20:08
ashishjainlooks like during container setup20:08
cloudnullgparaskevas:  is the value being used for the UUID a valid UUID ?20:08
cloudnullive not seen that error before20:08
ashishjainthis mirror.rackspace.com is used for host setup or lxc container setup?20:08
cloudnullhowever ive not done much with ceph20:08
cloudnulld34dh0r53: maybe youve seen something similar ?20:08
gparaskevascloudnull: mm let me check!20:08
cloudnullashishjain: mirror.rackspace is used when preping the container base image20:09
*** ompp has quit IRC20:09
gparaskevascloudnull: actualy this is not what i types in user_variables...20:09
gparaskevastyped*20:09
ashishjaincloudnull: can you please point out the the playbook which does that20:10
cloudnullashishjain: the repo can be changed to something else using the following variables: lxc_container_template_main_apt_repo lxc_container_template_security_apt_repo20:10
cloudnullashishjain: https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/lxc_hosts/defaults/main.yml#L56-L5720:10
*** k_stev has quit IRC20:11
ashishjaincloudnull: can I change it to http://archive.ubuntu.com/ubuntu?20:11
*** woodard has quit IRC20:13
cloudnullashishjain:  you sure can20:13
ashishjaincloudnull: wow than I will try using that.20:14
cloudnulljust put those two variables with the values you want into your user_variables.yml file.20:14
ashishjaincloudnull: Cool I will do that20:14
ashishjaincloudnull: One more thing20:14
cloudnulllet me know how it goes .20:14
cloudnullsure20:15
ashishjaincloudnull: sure I will20:15
ashishjaincloudnull: I used the file user_group_vars.yml and changed the openstack_repo_url:20:15
ashishjainto my local repo20:15
cloudnullthat'll work20:16
ashishjainBut I still see rackspace repo being used20:16
ashishjainno it does not because I see in the logs20:16
cloudnullyour running: openstack-ansible setup-hosts.yml ?20:16
ashishjain--- openstack_repo_url: "http://xxxxxxxxx:8081/nexus/content/repositories/rackspace-repo/"20:17
ashishjaincloudnull: yes20:17
*** sdake has quit IRC20:17
ashishjaincloudnull: if you see the paste I created it still refers to ttp://rpc-repo.rackspace.com/container_images/rpc-trusty-container.tgz20:18
cloudnullrun: grep -rni openstack_repo_url /etc/openstack_deploy20:18
cloudnullit seems like you may have duplicate items in some of those variable files.20:18
cloudnullalso the user_group_vars.yml file was removed in 11.1.x (i think) because it was shown to cause some confusion. We had overloaded that file with everything but it was unnecessary.20:20
cloudnullif your not setting anything specific in that file i'd remove it .20:20
*** spotz is now known as spotz_zzz20:20
ashishjaincloudnull: sudo grep -rni openstack_repo_url /etc/openstack_deploy [sudo] password for coeadmin:  /etc/openstack_deploy/user_group_vars.yml:2:openstack_repo_url: "http://xxxxxxxx:8081/nexus/content/repositories/rackspace-repo/" /etc/openstack_deploy/openstack_user_config.yml.example:340:# the 'openstack_repo_url' variable in the user_group_vars.yml file to20:20
gparaskevascloudnull: looked like i had forgoten some pressious doublle quotes...problem solved20:20
ashishjaincloudnull: there is only 1 hit20:21
cloudnullif you are i'd take the items out, put them somewhere else, which should help get rid of duplicates.20:21
ashishjainother one is from .example file20:21
cloudnullexample is ok20:21
cloudnullgparaskevas: nice!20:22
cloudnullashishjain:  openstack_repo_url is used for the pip packages. while "lxc_container_template_main_apt_repo" and "lxc_container_template_security_apt_repo" are variables for in container apt packages.20:22
*** sdake has joined #openstack-ansible20:23
ashishjaincloudnull: okay what shall I do now to make this work20:24
cloudnulldo you have something overriding lxc_container_caches ?20:24
ashishjaincloudnull: hmmm not sure20:24
*** Mudpuppy_ has quit IRC20:24
cloudnullgrep -rni lxc_container_caches20:25
ashishjaincloudnull: But I can assure you this is the first time we are trying osad on these hosts20:25
cloudnullwhat version ?20:25
ashishjaincloudnull: in /var/lib?20:25
ashishjainubuntu 14.04.120:25
cloudnullin /etc/openstack_deploy20:25
cloudnullwhat version of osad ?20:25
ashishjainkilo20:26
cloudnullfrom the kilo branch  ?20:26
palendaewhat's an osad?20:26
ashishjaingit branch says *kilo20:26
cloudnullok20:26
*** shausy has quit IRC20:26
ashishjainsudo grep -rni lxc_container_caches  /etc/openstack_deploy20:26
ashishjainno hits20:26
cloudnullok thats good.20:27
*** wmlynch has joined #openstack-ansible20:27
ashishjaincloudnull: one more thing we use proxy settings also...I am hoping that should not be an issue20:28
*** woodard has joined #openstack-ansible20:29
cloudnullashishjain: it looks like you need to set the following http://cdn.pasteraw.com/pi5ptnypgk4c9wwlgwenwkr27jpp3c020:32
*** tiagogomes_ has joined #openstack-ansible20:32
cloudnulltiagogomes_: o/ if you have a chance it'd be great to get some feedback on: https://review.openstack.org/#/c/232666 and https://review.openstack.org/#/c/23263720:34
ashishjaincloudnull: Does not  openstack_repo_url: "http://xxxxxxxx:8081"needs the whole thing?20:35
cloudnullno20:35
tiagogomes_cloudnull I'll, let me test the changes20:35
cloudnullashishjain: also if youre behind a proxy youre likely going to need to set the following https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_variables.yml#L150-L15620:35
cloudnullthanks tiagogomes_ :)20:36
*** wmlynch has quit IRC20:36
ashishjaincloudnull: I have set those variables, one question on those variables do i need this whole thing in no_proxy " # no_proxy_env: "localhost,127.0.0.1,{% for host in groups['all_containers'] %}{{ hostvars[host]['container_address'] }}{% if not loop.last %},{% endif %}{% endfor %}""20:38
ashishjainbasically is this required {% for host in groups['all_containers'] %}{{ hostvars[host]['container_address'] }}{% if not loop.last %},{% endif %}{% endfor %}?20:38
ashishjaincloudnull: what does this section means that for all the container ips allocated through br-mgmt do not use proxy?20:39
cloudnullashishjain:  yes it builds a comma seperated list of containers on the container network that will not use the proxy.20:41
ashishjaincloudnull: so you mean lxc containers do not need proxy?20:42
cloudnullthats all dependent on your setup.20:42
cloudnullnormal defaults are the localhost.20:43
cloudnullbut it was a config example that worked before20:43
cloudnulland so we documented it20:43
cloudnull-cc sigmavirus24 ^20:43
ashishjaincloudnull: Okay I will try using it.20:44
ashishjaincloudnull: one last query plz20:44
*** Mudpuppy has joined #openstack-ansible20:45
ashishjainI have seen this error today its a big one20:45
ashishjainhttp://paste.openstack.org/show/475792/20:45
gparaskevascloudnull:  should i fill in #nova_ceph_client: #nova_ceph_client_uuid: -> https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_variables.yml?20:45
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup  https://review.openstack.org/23121420:45
ashishjaindon't know why it came but the lxc container was downloaded without any issues20:46
cloudnullashishjain:  looks like youre missing tar.20:46
ashishjainyou mean linux tar package is not installed?20:47
cloudnullseems that way20:47
cloudnullthe error indicates that it cant stat the file "/bin/tar"20:47
cloudnullgparaskevas:  looking20:47
gparaskevascloudnull: sure :)20:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38535: Don't respond to ICMPv4 broadcast  https://review.openstack.org/23219820:48
ashishjaincloudnull: all the hosts have got the tar package20:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38539: Enable TCP SYN cookies  https://review.openstack.org/23221220:49
ashishjaincloudnull:anyways I will rerun the playbook with all the changes you have suggested, let you know how it goes. Thanks a ton for your help, time and patience20:49
cloudnullashishjain: i've not seen that error before20:49
cloudnullbut yes, let us know how it goes :)20:49
ashishjainSure :)20:49
* cloudnull happy to help whenever20:50
cloudnullgparaskevas: idk if those need to be filled out.20:50
*** woodard_ has joined #openstack-ansible20:50
cloudnulli think theyre just overrides.20:50
cloudnulld34dh0r53: ?20:50
gparaskevascloudnull: ok i give it another try! thanks again20:50
d34dh0r53one second, reading the scrollback20:51
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup  https://review.openstack.org/23121420:51
cloudnullsvg, git-harry, andymccr, d34dh0r53, mattt, and a few others sorry im missing names im sure, have done a fair bit of work w/ ceph.20:52
cloudnullgparaskevas:  sorry im not the most knowledgeable in that regard.20:52
prometheanfiremhayden: just rebases for ipv4 broadcasts and tcp syn?20:52
mhaydenprometheanfire: yessir20:53
prometheanfireseems like it, +1s carried over20:53
gparaskevascloudnull: its ok i will give it a try once more to see i through! i will ask mattt tomorow maybe, thanks!20:53
cloudnullbest of luck !20:53
gparaskevascloudnull: oh i am gonna need that! :P20:53
gparaskevascloudnull: hah20:53
d34dh0r53gparaskevas: are you using ceph for boot disks?20:53
gparaskevasd34dh0r53: yes20:54
gparaskevasand cinder and glance20:54
cloudnullgparaskevas: nah, cloud aint hard :D20:54
*** woodard has quit IRC20:54
d34dh0r53gparaskevas: ok, then yes, you can generate a UUID and put it in there20:54
gparaskevascloudnull:  haha yeah!20:54
gparaskevasok20:54
*** woodard_ has quit IRC20:55
d34dh0r53gparaskevas: and I believe you set nova_ceph_client: to nova20:55
gparaskevasd34dh0r53: mmm no it says that i dont need to define anothger client i can reuse cinder20:55
d34dh0r53gparaskevas: ok20:56
d34dh0r53gparaskevas: do that then, not sure about that one20:56
*** k_stev has joined #openstack-ansible20:56
gparaskevasd34dh0r53: ok! i will tell as soon as i finish20:56
d34dh0r53gparaskevas: awesome!20:56
*** ig0r_ has joined #openstack-ansible20:59
*** ig0r_ has quit IRC21:03
*** ig0r_ has joined #openstack-ansible21:05
*** Bjoern_ has quit IRC21:06
*** Bjoern_ has joined #openstack-ansible21:10
*** ig0r_ has quit IRC21:10
*** tiagogomes_ has quit IRC21:10
*** gjn has joined #openstack-ansible21:17
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master  https://review.openstack.org/23118721:17
openstackgerritJaveria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup  https://review.openstack.org/23121421:18
*** gparaskevas has quit IRC21:19
*** Mudpuppy has quit IRC21:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207421:24
*** fawadkhaliq has quit IRC21:27
*** sdake has quit IRC21:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38637: Verify auditd pkg contents  https://review.openstack.org/23276721:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible: Add OS detection in scripts-library.sh  https://review.openstack.org/23144821:36
*** knighthawk has joined #openstack-ansible21:39
*** javeriak has quit IRC21:41
*** javeriak has joined #openstack-ansible21:43
*** alop has quit IRC21:43
*** sigmavirus24 is now known as sigmavirus24_awa21:43
*** k_stev has quit IRC21:44
*** Bjoern_ has quit IRC21:55
*** kukacz has quit IRC22:00
*** knighthawk has quit IRC22:02
*** tiagogomes_ has joined #openstack-ansible22:03
*** galstrom is now known as galstrom_zzz22:08
*** pradk has quit IRC22:17
*** alejandrito has quit IRC22:20
*** javeriak has quit IRC22:24
*** daneyon_ has joined #openstack-ansible22:24
*** daneyon has quit IRC22:28
*** daneyon_ has quit IRC22:29
*** jwagner is now known as jwagner_away22:29
*** KLevenstein has quit IRC22:37
tiagogomes_why the install apt install packages for galera differ from upstream http://galeracluster.com/documentation-webpages/installmysql.html ?22:43
*** Bjoern_ has joined #openstack-ansible22:45
*** cloudtrainme has quit IRC22:51
*** tiagogomes_ has quit IRC23:04
*** CheKoLyN has quit IRC23:13
*** scarlisle has quit IRC23:14
*** elo1 has quit IRC23:16
openstackgerritKevin Carter proposed openstack/openstack-ansible: Added variable deprecation role and check  https://review.openstack.org/23281123:35
*** gjn has quit IRC23:35
*** gjn has joined #openstack-ansible23:39
*** harlowja has quit IRC23:52
*** harlowja has joined #openstack-ansible23:52
*** abitha has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!