| *** markvoelker has quit IRC | 00:29 | |
| *** phalmos has quit IRC | 00:32 | |
| *** sdake has joined #openstack-ansible | 00:35 | |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Updated the repo-build process https://review.openstack.org/230716 | 00:57 |
|---|---|---|
| *** kerwin_bai has joined #openstack-ansible | 01:15 | |
| *** Bjoern_ has quit IRC | 01:16 | |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Add novnc console support https://review.openstack.org/232657 | 01:21 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Install spice-html5 from source https://review.openstack.org/232697 | 01:21 |
| *** tlian has quit IRC | 01:33 | |
| *** metral_zzz is now known as metral | 01:36 | |
| openstackgerrit | Merged openstack/openstack-ansible: Remove unused libvirt-bin file https://review.openstack.org/231084 | 01:40 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix bashate violations https://review.openstack.org/231090 | 01:41 |
| *** sdake has quit IRC | 01:44 | |
| *** metral is now known as metral_zzz | 01:45 | |
| *** bgmccollum has quit IRC | 01:59 | |
| openstackgerrit | Merged openstack/openstack-ansible: Fix run-aio-build.sh for curl one-liner https://review.openstack.org/231857 | 02:01 |
| *** ashishjain has quit IRC | 02:04 | |
| *** bgmccollum has joined #openstack-ansible | 02:11 | |
| *** kerwin_bai1 has joined #openstack-ansible | 02:24 | |
| *** ashishjain has joined #openstack-ansible | 02:25 | |
| ashishjain | cloudnull: you there | 02:25 |
| *** kerwin_bai has quit IRC | 02:26 | |
| *** kerwin_bai1 is now known as kerwin_bai | 02:26 | |
| ashishjain | Hello | 02:27 |
| ashishjain | Can someone please advice how to verify if the first playbook setup-hosts.yml has run successfully | 02:28 |
| ashishjain | I left it unattended and can see lot of lxc containers in a running state | 02:29 |
| ashishjain | Is their a way to verify ( may be by running a script) which will suggest if all is completed | 02:29 |
| cloudnull | ashishjain: o / | 02:30 |
| cloudnull | you can verify all things are running using ansible | 02:30 |
| cloudnull | ansible 'hosts,all_containers' -m ping | 02:30 |
| ashishjain | hey cloudnull thanks a lot I was able to make the first playbook work ... actually it was late night and I was running the stuff remotely and I can see in my logs that I fired the 3 playbook but just wanted to crosscheck | 02:31 |
| cloudnull | sorry | 02:31 |
| cloudnull | ansible 'hosts:all_containers' -m ping | 02:31 |
| cloudnull | the other thing that you can do to log all of your interactions is to add log_path to your ansible.cfg file | 02:32 |
| cloudnull | http://docs.ansible.com/ansible/intro_configuration.html#log-path | 02:32 |
| cloudnull | that will log all of your ansible commands | 02:32 |
| ashishjain | cloudnull: ERROR: Unable to find an inventory file, specify one with -i ? | 02:33 |
| cloudnull | we dont add it by default because we cant guarentee the pathing | 02:33 |
| ashishjain | I have not defined a /etc/anisble/hosts file | 02:33 |
| cloudnull | ashishjain: you have to execute that ansible command from your playbooks directory | 02:33 |
| cloudnull | IE: /opt/openstack-ansible/playbooks | 02:33 |
| cloudnull | that will use your existing inventory. | 02:33 |
| ashishjain | cloudnull: I see No hosts matched | 02:34 |
| cloudnull | this command ansible 'hosts:all_containers' -m ping | 02:36 |
| cloudnull | the first one i put a comma in it when it shouldve been a colon | 02:36 |
| ashishjain | aah I am sorry | 02:37 |
| ashishjain | cloudnull: I see the error openstack006_nova_conductor_container-bf96f5b5 | FAILED => SSH Error: data could not be sent to the remote host. Make sure this host can be reached over ssh | 02:39 |
| ashishjain | this is because my containers have got only 1 Ip | 02:39 |
| cloudnull | is that for all of them ? | 02:39 |
| ashishjain | default provided by lxcbr0 | 02:39 |
| ashishjain | yes | 02:39 |
| ashishjain | :( | 02:39 |
| ashishjain | It have not used the br-mgmt cidr at all | 02:40 |
| ashishjain | cloudnull: however openstack_inventory.json is generated just fine | 02:40 |
| cloudnull | do the items in inventory have ip address ? | 02:40 |
| ashishjain | Yes they do have just one example here | 02:41 |
| ashishjain | nsible_ssh_host": "192.168.30.144", "component": "galera", "container_address": "192.168.30.144", | 02:41 |
| ashishjain | this is from openstack_inventory.json | 02:41 |
| cloudnull | do all of your hosts have br-mgnt on them ? | 02:41 |
| cloudnull | and is that network interface up ? | 02:41 |
| ashishjain | cloudnull: yes all of them have the br-mgmt interface | 02:42 |
| ashishjain | and all are up | 02:42 |
| cloudnull | rerun: openstack-ansible lxc-container-create.yml | 02:42 |
| cloudnull | that should create all of the network devices in al containers . | 02:43 |
| cloudnull | maybe it died mid way through a run ? | 02:43 |
| ashishjain | cloudnull: Once I rerun will it create the same containers with same name for example openstack006_galera_container-edb2126f | 02:45 |
| ashishjain | It will not create the one with another name | 02:45 |
| ashishjain | this is because I have allocated around 30GB of space to each host and around 12G is already used | 02:46 |
| cloudnull | it shouldnt recreate the containers itll just make sure the config is correct | 02:46 |
| cloudnull | to test you can rerun with a limit | 02:47 |
| ashishjain | you mean openstack006_galera_container-edb2126f | 02:47 |
| ashishjain | sorry | 02:47 |
| cloudnull | openstack-ansible lxc-container-create.yml --limit openstack006_galera_container-edb2126f | 02:47 |
| ashishjain | you mean this config openstack_user_config.yml | 02:47 |
| cloudnull | no | 02:47 |
| cloudnull | the lxc-container-create.yml play will do all of the container configuration | 02:48 |
| ashishjain | okay alright I will try out for one container | 02:48 |
| ashishjain | cloudnull: wow it finished and I could see a new ip attached to galera container :D :) | 02:50 |
| ashishjain | lxc-ls -f NAME STATE IPV4 IPV6 AUTOSTART ----------------------------------------------------------------------------------------------------------------------- openstack006_galera_container-edb2126f RUNNING 10.0.3.138, 192.168.30.144 - YES (onboot, openstack) | 02:50 |
| ashishjain | earlier I only had 10.0.3.138 | 02:50 |
| cloudnull | cool | 02:52 |
| ashishjain | Now I ran the same command as you have pointed out earlier and I could see galera being in a good state | 02:52 |
| ashishjain | openstack006_galera_container-edb2126f | success >> { "changed": false, "ping": "pong" } | 02:52 |
| cloudnull | so now run it without the limit | 02:52 |
| ashishjain | Cool will do that, thanks a lot | 02:52 |
| cloudnull | and itll make sure the configuration on all containers is correct | 02:52 |
| cloudnull | np | 02:52 |
| cloudnull | i have to run , time to sleep | 02:52 |
| cloudnull | talk to you later. | 02:52 |
| ashishjain | alright great thanks have a good night | 02:53 |
| ashishjain | take care | 02:53 |
| *** sdake has joined #openstack-ansible | 03:51 | |
| *** markvoelker has joined #openstack-ansible | 03:55 | |
| *** g3rms_ has quit IRC | 04:02 | |
| *** galstrom_zzz is now known as galstrom | 04:10 | |
| *** fawadkhaliq has joined #openstack-ansible | 04:28 | |
| *** ashishjain has quit IRC | 04:36 | |
| *** markvoelker_ has joined #openstack-ansible | 04:40 | |
| *** sdake_ has joined #openstack-ansible | 04:41 | |
| *** markvoelker has quit IRC | 04:43 | |
| *** galstrom is now known as galstrom_zzz | 04:43 | |
| *** sdake has quit IRC | 04:44 | |
| *** kerwin_bai has quit IRC | 04:45 | |
| *** kerwin_bai has joined #openstack-ansible | 04:56 | |
| *** manikanta has joined #openstack-ansible | 05:01 | |
| *** sdake_ has quit IRC | 05:01 | |
| *** sdake has joined #openstack-ansible | 05:07 | |
| *** javeriak has joined #openstack-ansible | 05:14 | |
| *** cfarquhar has joined #openstack-ansible | 05:16 | |
| *** cfarquhar has quit IRC | 05:16 | |
| *** cfarquhar has joined #openstack-ansible | 05:16 | |
| *** cfarquhar has quit IRC | 05:24 | |
| *** cfarquhar has joined #openstack-ansible | 05:25 | |
| *** cfarquhar has quit IRC | 05:25 | |
| *** cfarquhar has joined #openstack-ansible | 05:25 | |
| *** kukacz has joined #openstack-ansible | 05:45 | |
| *** cfarquhar has quit IRC | 05:48 | |
| *** cfarquhar has joined #openstack-ansible | 05:49 | |
| *** cfarquhar has quit IRC | 05:49 | |
| *** cfarquhar has joined #openstack-ansible | 05:49 | |
| *** cfarquhar has quit IRC | 05:50 | |
| *** kukacz has quit IRC | 06:00 | |
| openstackgerrit | Steve Lewis proposed openstack/openstack-ansible: Use pip install --proxy when $HTTP_PROXY is set https://review.openstack.org/232916 | 06:05 |
| openstackgerrit | Steve Lewis proposed openstack/openstack-ansible: Use pip install --proxy when $HTTP_PROXY is set https://review.openstack.org/232916 | 06:19 |
| *** kukacz has joined #openstack-ansible | 06:20 | |
| *** javeriak has quit IRC | 06:29 | |
| *** kukacz has quit IRC | 06:33 | |
| *** kukacz_ has joined #openstack-ansible | 06:33 | |
| *** sdake has quit IRC | 06:33 | |
| *** kukacz has joined #openstack-ansible | 06:34 | |
| *** kukacz_ has quit IRC | 06:35 | |
| *** kukacz has quit IRC | 06:36 | |
| *** kukacz_ has joined #openstack-ansible | 06:36 | |
| *** kerwin_bai has quit IRC | 06:36 | |
| *** kerwin_bai has joined #openstack-ansible | 06:37 | |
| *** fawadkhaliq has quit IRC | 06:43 | |
| *** javeriak has joined #openstack-ansible | 06:51 | |
| *** ashishjain has joined #openstack-ansible | 06:51 | |
| *** javeriak has quit IRC | 06:56 | |
| *** javeriak has joined #openstack-ansible | 06:56 | |
| ashishjain | Hello | 07:03 |
| ashishjain | Need some help on osad | 07:04 |
| ashishjain | One of my host has failed on lxc-hosts-setup.yml and I am rerunning the playbook | 07:04 |
| ashishjain | with this command "openstack-ansible lxc-hosts-setup.yml --limit openstack008 -vvv" | 07:04 |
| ashishjain | Now when I run the above playbook I get the following error | 07:05 |
| ashishjain | msg: Destination directory /var/cache/lxc/trusty/rootfs-amd64/etc/apt does not exist | 07:05 |
| ashishjain | can someone please suggest how to get rid of this error | 07:05 |
| ashishjain | Shall I rerun the playbook openstack-hosts-setup.yml for this particular host? | 07:05 |
| javeriak | ashishjain try rerunning the main playbook with the limit flag | 07:07 |
| ashishjain | javeriak: setup-hosts.yml is it? | 07:07 |
| javeriak | yes "openstack-ansible setup-hosts.yml --limit openstack008 -vvv" | 07:08 |
| ashishjain | javeriak: thanks I will try this out | 07:08 |
| javeriak | np | 07:08 |
| ashishjain | javeriak: it has failed again at the same step :( | 07:09 |
| ashishjain | msg: Destination directory /var/cache/lxc/trusty/rootfs-amd64/etc/apt does not exist | 07:10 |
| ashishjain | Only this directory exist /var/cache/lxc | 07:10 |
| ashishjain | "trusty/rootfs-amd64/etc/apt" is missing | 07:10 |
| javeriak | ashishjain what branch are you on? | 07:10 |
| ashishjain | kilo | 07:10 |
| *** fawadkhaliq has joined #openstack-ansible | 07:11 | |
| ashishjain | javeriak: looks like the directory untar has not happened | 07:12 |
| ashishjain | and their is somewhere osad is thinking that untar has happened | 07:12 |
| javeriak | ashishjain hmm, in that case run the playbook as is again, without limit setup-hosts | 07:13 |
| ashishjain | aahhh that will be a nightmare it will take hous | 07:13 |
| ashishjain | hours | 07:13 |
| javeriak | you must be remote :), dont worry it skips already completed tasks | 07:14 |
| javeriak | so not that long | 07:14 |
| ashishjain | javeriak: sure I agree but if this is a bug I would provide a fix and get one of my commit in osad :D | 07:15 |
| javeriak | ashishjain then i suggest you do a little more digging :) | 07:15 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Add novnc console support https://review.openstack.org/232657 | 07:16 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Install spice-html5 from source https://review.openstack.org/232697 | 07:16 |
| *** gparaskevas has joined #openstack-ansible | 07:18 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Updated the repo-build process https://review.openstack.org/230716 | 07:19 |
| openstackgerrit | Merged openstack/openstack-ansible: Removing fixed settings inside the glance-cache.conf https://review.openstack.org/232665 | 07:20 |
| evrardjp | hello everyone | 07:22 |
| evrardjp | sorry for not being there at the previous meeting, and I'd like to say we've forgot to assign new ppl for managing next week meetings | 07:23 |
| evrardjp | I can't do it next week, sorry | 07:24 |
| javeriak | odyssey4me, this commit keep failing on two gates https://review.openstack.org/#/c/231187/, and the failure is a basic tempest test, since the main log doesnt give further info, do we export tempest logs anywhere? | 07:24 |
| evrardjp | In fact, I can't do it until after the summit :/ | 07:24 |
| evrardjp | javeriak, SSHTimeout: Connection to the 172.29.248.9 via SSH timed out.? | 07:26 |
| evrardjp | (no route to host) | 07:26 |
| javeriak | evrardjp yep thats it | 07:26 |
| javeriak | gotta step out for a bit, be back in 30 mins | 07:27 |
| *** javeriak has quit IRC | 07:28 | |
| openstackgerrit | Merged openstack/openstack-ansible: Add isolated flag to pip fall back installation https://review.openstack.org/232668 | 07:28 |
| openstackgerrit | Merged openstack/openstack-ansible: Limit the number of Ansible forks used to 10 https://review.openstack.org/232387 | 07:28 |
| *** subscope has quit IRC | 07:29 | |
| stevelle | ashishjain: https://review.openstack.org/232916 for your review | 07:43 |
| evrardjp | stevelle, isn't setting https_proxy enough? | 07:52 |
| evrardjp | (I mean export HTTPS_PROXY) | 07:52 |
| evrardjp | mostly when I see this: http://stackoverflow.com/a/19962913 | 07:53 |
| evrardjp | (didn't test it, I'm just cautious) | 07:53 |
| gparaskevas | anyone familiar with the ceph ragrding openstack-ansible? | 07:54 |
| evrardjp | gparaskevas, not really familiar, but we are using it partially, why? | 07:55 |
| stevelle | evrardjp: I think it should but ashishjain was reporting an issue with it. | 07:56 |
| gparaskevas | evrardjp: i am having some strabge error when deploying openstack with ceph enabled, I have installed ceph and have created the pools and keys allready with ceph-ansible | 07:57 |
| gparaskevas | evrardjp: then i edit user_variables in openstack-ansible and fillin pools client for glance cinder nova, but playbooks fails because nova tried to use cinder uuid | 07:58 |
| gparaskevas | evrardjp: but it says that i can reuse cinder client for nova use, whats wrong, i must be misssing something | 07:58 |
| *** javeriak has joined #openstack-ansible | 07:59 | |
| odyssey4me | o/ all | 07:59 |
| evrardjp | stevelle: is there a HTTPS_PROXY or is there only HTTP_PROXY ? ;) | 07:59 |
| odyssey4me | javeriak you can, if you wish, ignore the -nv gate failure... although it may give you more clues | 07:59 |
| odyssey4me | javeriak the tempest logs are in the utility container: http://logs.openstack.org/87/231187/8/check/gate-openstack-ansible-dsvm-commit/d6ec94a/logs/aio1_utility_container-33590397/ | 07:59 |
| evrardjp | gparaskevas, to be honest, I tried to give my own users and it failed | 08:00 |
| evrardjp | I then followed the ceph and openstack best practices | 08:00 |
| evrardjp | I think these playbooks could work better/be worked on | 08:00 |
| evrardjp | until then, I suggest you to use standard usernames | 08:01 |
| gparaskevas | evrardjp: i am now using different clients for cinder and nova just to see | 08:01 |
| evrardjp | yeah that's what I started with ;) | 08:01 |
| gparaskevas | ok! | 08:01 |
| gparaskevas | lets see | 08:01 |
| stevelle | time for me to crash for the night, meetings start in under 7h | 08:01 |
| evrardjp | gparaskevas, it wasn't much success for me, and I was taken by time | 08:02 |
| odyssey4me | gparaskevas yeah, evrardjp picked that up early on - there seems to be an occasional precedence issue with Ansible where user_variables doesn't always take the highest precedence... and we haven't yet isolated it | 08:02 |
| evrardjp | gparaskevas, so I followed this: http://docs.ceph.com/docs/v0.71/rbd/rbd-openstack/ | 08:02 |
| *** openstackstatus has quit IRC | 08:02 | |
| *** openstackstatus has joined #openstack-ansible | 08:03 | |
| *** ChanServ sets mode: +v openstackstatus | 08:03 | |
| gparaskevas | mmm ok thanks both of you! lets see if it fails again, and then i will do it mannualy | 08:03 |
| evrardjp | odyssey4me, note that some of my variable precedences issues were fixed upon some ansible upgrades | 08:04 |
| evrardjp | but I didn't got the chance to look back at ceph | 08:04 |
| odyssey4me | evrardjp ah, good to know - as I recall we kinda thought that it was ok seeing as if you use the expected names then it works, and perhaps the precedence issues would go away with later versions of Ansible | 08:09 |
| odyssey4me | essentially we had more interesting problems to solve ;) | 08:10 |
| evrardjp | it always comes to a question of time and priorities. I don't see a problem of using standard names in our ceph cluster, so... it was easier that way for me | 08:11 |
| *** 6A4AAO5AD has joined #openstack-ansible | 08:13 | |
| odyssey4me | javeriak it would appear that something isn't quite right: 'error: [Errno 113] No route to host' | 08:19 |
| javeriak | odyssey4me, thanks for looking into it, both gates seem to be failing with the same reason. Weird thing is that the second dependent commit passed jenkins completely, i assume dependencies get run together in jenkins? | 08:25 |
| *** Burgosz has joined #openstack-ansible | 08:25 | |
| odyssey4me | javeriak yes, as the dependency is applied it will effectively do a checkout | 08:26 |
| odyssey4me | so if it fails with the first and not the second, are you sure there's nothing in the second being done which needs to be in the first? | 08:27 |
| javeriak | odyssey4me right so the commit itself is clean operation wise | 08:27 |
| odyssey4me | otherwise it may just be a transient failure - unfortunately that happens | 08:27 |
| javeriak | nope the second changes are independent: https://review.openstack.org/#/c/231214/5 | 08:27 |
| odyssey4me | but it seems that it is happening far too consistently | 08:27 |
| javeriak | yes ive been watching since yesterday and it fails the same way for the past 3 runs, that cloudnull and i retriggered it | 08:28 |
| javeriak | let me look into those utility tempest logs and see if i can find anything | 08:29 |
| odyssey4me | javeriak I've added a comment to https://review.openstack.org/#/c/231214/5/playbooks/roles/os_neutron/defaults/main.yml,cm | 08:29 |
| javeriak | odyssey4me I missed taking out the comma from last patch, leftover from converting that list to a hash | 08:32 |
| odyssey4me | javeriak perhaps the first patch needs that? | 08:32 |
| javeriak | first patch? the comma is an error, its not supposed to be be there | 08:35 |
| javeriak | wait your right! I missed it in latest patch, sorry about that :P | 08:36 |
| ashishjain | stevelle: thanks this parch looks good "https://review.openstack.org/#/c/232916/" :) | 08:36 |
| ashishjain | *patch | 08:36 |
| ashishjain | But dont we need to have https_proxy as well? | 08:37 |
| ashishjain | One more observation once a host fails for one task that host is not considered at all for any subsequent tasks probably for that particular playbook | 08:38 |
| ashishjain | is it an expected behavior? | 08:39 |
| *** javeriak has quit IRC | 08:39 | |
| *** javeriak has joined #openstack-ansible | 08:40 | |
| ashishjain | My setup-host.yml is failing with this error all the time "msg: Destination directory /var/cache/lxc/trusty/rootfs-amd64/etc/apt does not exist" | 08:40 |
| ashishjain | inspite of re running the playbooks with --limit option and also re running the complete thing it keeps failing | 08:40 |
| evrardjp | ashishjain, could you check if your trusty template was well downloaded on the host? | 08:42 |
| evrardjp | by going to /var/cache/lxc/trusty/? | 08:42 |
| evrardjp | gparaskevas, please also check that you have something like ceph in your secrets | 08:43 |
| evrardjp | IIRC, there was a bug that removed the ceph variable because it was by default commented | 08:44 |
| evrardjp | I'll fix that | 08:44 |
| *** javeriak_ has joined #openstack-ansible | 08:44 | |
| *** javeriak_ has quit IRC | 08:44 | |
| *** subscope has joined #openstack-ansible | 08:44 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update nova & tempest SHA's and remove django-openstack-auth SHA https://review.openstack.org/232955 | 08:44 |
| *** javeriak has quit IRC | 08:45 | |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master https://review.openstack.org/231187 | 08:46 |
| odyssey4me | ashishjain you may notice that I've commented the same in the review. :) it's also best if you comment/discuss in the review as the review retains the record of discussion and decisions made | 08:46 |
| ashishjain | evrardjp: The directory /var/cache has got the file lxc_trusty.tgz. And I am able to manually untar/unzip with the command tar -xvzf | 08:46 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup https://review.openstack.org/231214 | 08:46 |
| ashishjain | odyssey4me: sure I will review in the bug | 08:46 |
| ashishjain | evrardjp: Is their a timeout associated with this untar process? | 08:48 |
| openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Removed unnecessary comment in the user_secrets for ceph variable https://review.openstack.org/232957 | 08:48 |
| *** javeriak has joined #openstack-ansible | 08:49 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Add novnc console support https://review.openstack.org/232657 | 08:53 |
| gparaskevas | evrardjp: you mean user_secrets? and what kind of ceph? like a ceph variable? | 08:54 |
| gparaskevas | evrardjp: nothing ceph in my scerets | 08:55 |
| evrardjp | I've written this patch just for you: https://review.openstack.org/#/c/232957/ | 08:55 |
| evrardjp | cinder_ceph_client_uuid should be defined in your user_secrets IIRC | 08:56 |
| evrardjp | unless you mention nova_ceph_client_uuid in your user variables | 08:57 |
| evrardjp | /secrets | 08:58 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fix run-aio-build.sh for curl one-liner https://review.openstack.org/232964 | 08:59 |
| *** kerwin_bai1 has joined #openstack-ansible | 08:59 | |
| *** kerwin_bai has quit IRC | 08:59 | |
| *** kerwin_bai1 is now known as kerwin_bai | 08:59 | |
| gparaskevas | let me check, i did define ceph_nova_uuid as: cinder_uuid and ceph_nova_client as cinder_client... | 09:02 |
| gparaskevas | i will check your pats as well | 09:02 |
| gparaskevas | thanks! | 09:02 |
| *** javeriak has quit IRC | 09:02 | |
| gparaskevas | evrardjp: i am running a test on your patch right now | 09:07 |
| gparaskevas | evrardjp: I believe it was the root my problem | 09:07 |
| gparaskevas | evrardjp: I will get bak to you as soon as possible | 09:08 |
| ashishjain | Can someone please suggest how is line number 41 being executed in https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/lxc_hosts/tasks/lxc_cache.yml | 09:08 |
| ashishjain | My issue is somewhere there I suppose | 09:08 |
| gparaskevas | ashishjain: you how you can call the specific tag? | 09:09 |
| gparaskevas | ashishjain: you mean* | 09:09 |
| ashishjain | gparaskevas: I was looking at the ansible document just now and they say you can call a tag to exeute part of a playbook or a task | 09:10 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Install spice-html5 from source https://review.openstack.org/232697 | 09:11 |
| ashishjain | I am new to ansible as well and hence learning it on the go | 09:11 |
| 6A4AAO5AD | can this change be https://review.openstack.org/#/c/232669/ merged in the kilo branch as well? | 09:11 |
| *** 6A4AAO5AD is now known as tiagogoems | 09:12 | |
| gparaskevas | ashishjain: openstack-ansible lxc-hosts-setup.yml --tags "lxc-cache-unarchive" | 09:13 |
| gparaskevas | ashishjain: something like that i suppose | 09:14 |
| odyssey4me | 6A4AAOSAD that is the kilo backport - it'll be merged once a second core votes it through | 09:15 |
| ashishjain | yes I know that but my question which probably is silly is where is this lxc-cache-unarchive defined? | 09:15 |
| evrardjp | ashishjain, if your cache isn't unarchived then you had an issue with your playbook | 09:16 |
| evrardjp | you should maybe rerun your playbook completely | 09:16 |
| ashishjain | evrardjp: I have already done that and it does not help | 09:16 |
| ashishjain | evrardjp: Can you please point me what is "lxc-cache-unarchive" | 09:17 |
| ashishjain | Is it a linux command or is it somethhing defined with-in osad? | 09:17 |
| ashishjain | it is not a linux command as far as I can see | 09:17 |
| evrardjp | nope | 09:17 |
| ashishjain | and I am not able to find out any yml which defines lxc-cache-unarchive | 09:18 |
| evrardjp | the tag lxc-cache-unarchive is merely a way to name what you're doing in the playbook | 09:18 |
| evrardjp | or in the task | 09:18 |
| evrardjp | here it's defined there: | 09:18 |
| evrardjp | https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/lxc_hosts/tasks/lxc_cache.yml | 09:18 |
| evrardjp | https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/lxc_hosts/tasks/lxc_cache.yml#L41 | 09:18 |
| ashishjain | evrardjp: Yes I saw that | 09:18 |
| evrardjp | so the task that should unarchive your downloaded template is https://github.com/openstack/openstack-ansible/blob/master/playbooks/roles/lxc_hosts/tasks/lxc_cache.yml#L33 | 09:18 |
| evrardjp | it uses the ansible module unarchive | 09:19 |
| evrardjp | http://docs.ansible.com/ansible/unarchive_module.html | 09:19 |
| evrardjp | you can find a list of default ansible modules here: http://docs.ansible.com/ansible/list_of_all_modules.html | 09:19 |
| ashishjain | evrardjp: I am sorry I got it now , just got confused with tags and all | 09:19 |
| evrardjp | tags is just a convenient way of naming stuff | 09:20 |
| evrardjp | you can then skip tags or, at the contrary, run it | 09:20 |
| ashishjain | I will try to manually invoke the playbook and see whats going wrong with unarchival of trusty container | 09:20 |
| evrardjp | https://github.com/openstack/openstack-ansible/blob/master/playbooks/setup-hosts.yml | 09:20 |
| evrardjp | this is the playbook you're running | 09:21 |
| evrardjp | (probably) | 09:21 |
| evrardjp | it's like a master playbook that launches other playbooks | 09:21 |
| evrardjp | you can run manually each one and check what fails | 09:21 |
| ashishjain | evrardjp: yes you are correct | 09:21 |
| ashishjain | evrardjp: Sure I will do that but I know that lxc_cache.yml is failing | 09:22 |
| evrardjp | or launch the master playbook and check the result, when it starts to fail, you can scrollback on your screen to see which task precisely failed | 09:22 |
| evrardjp | ok | 09:22 |
| ashishjain | evrardjp: I have captured the logs and the first failure starts from lxc_cache.yml | 09:22 |
| evrardjp | it's the download that failed? | 09:23 |
| ashishjain | no download was successful | 09:28 |
| ashishjain | I am able to manually use the command tar -xvzf <file_name> | 09:28 |
| gparaskevas | evrardjp: http://cdn.pasteraw.com/i482l5nt7cl864c5kl2motmbkxc2s7y this is what i get now... | 09:28 |
| ashishjain | I will just try with playbook now | 09:28 |
| evrardjp | gparaskevas, you deined your own secret before? | 09:29 |
| evrardjp | defined* | 09:30 |
| gparaskevas | yes | 09:30 |
| evrardjp | ok, I thought you didn't do it | 09:31 |
| *** subscope has quit IRC | 09:32 | |
| *** subscope has joined #openstack-ansible | 09:33 | |
| *** serverascode has quit IRC | 09:34 | |
| gparaskevas | evrardjp: cinder_ceph_client_uuid: d2c45268-6def-11e5-96d8-001aa07cbdc2 | 09:34 |
| *** javeriak has joined #openstack-ansible | 09:34 | |
| gparaskevas | from my user_secrets.yml, in openstach_user_config i define as well in the cinder confiig | 09:35 |
| *** kukacz__ has joined #openstack-ansible | 09:35 | |
| evrardjp | let me check how I did this | 09:35 |
| evrardjp | it's been a while | 09:36 |
| evrardjp | in my user_config I have a rbd_user: cinder and rbd_secret_uuid: "{{cinder_ceph_client_uuid}}" | 09:36 |
| gparaskevas | yes | 09:37 |
| *** meteorfox has quit IRC | 09:37 | |
| evrardjp | and in my user_secrets I have cinder_ceph_client_uuid: | 09:37 |
| evrardjp | (with a value ofc) | 09:38 |
| evrardjp | in my user_variables I have cinder_ceph_client: cinder, glance_ceph_client: glance | 09:38 |
| *** kukacz__ has quit IRC | 09:39 | |
| evrardjp | I didn't define nova_ceph_client | 09:39 |
| evrardjp | and this way you have your libvirt using ceph | 09:39 |
| *** kukacz has joined #openstack-ansible | 09:39 | |
| evrardjp | if you ran any playbook involving ceph before, maybe a UUID was created | 09:40 |
| evrardjp | maybe you should do an ansible -m shell -a "virsh secret-list" nova_compute | 09:41 |
| evrardjp | see what are the secrets already defined | 09:42 |
| evrardjp | removing them if necessary | 09:42 |
| evrardjp | (I guess you're in testing mode, right? not doing that in production?) | 09:42 |
| gparaskevas | correct | 09:43 |
| gparaskevas | yes thats my test bed at home! | 09:43 |
| evrardjp | :) | 09:44 |
| evrardjp | nice testing environment then :) | 09:44 |
| evrardjp | I guess the WAF must be low though ;) | 09:44 |
| gparaskevas | waf? | 09:44 |
| *** fawadkhaliq has quit IRC | 09:45 | |
| odyssey4me | it sounds to me like we could do with an install guide page on how to configure openstack-ansible for ceph ;) | 09:46 |
| evrardjp | "wife" acceptance factor ;) | 09:46 |
| *** fawadkhaliq has joined #openstack-ansible | 09:46 | |
| odyssey4me | lol | 09:46 |
| evrardjp | or wife approval factor, I don't really know | 09:46 |
| gparaskevas | yeah right well if there is a Mother Acceptance Factor then yes is low... | 09:46 |
| gparaskevas | hahaha | 09:46 |
| gparaskevas | omg i loughed so hard | 09:47 |
| evrardjp | just to say my wife wouldn't accept that I run a ceph cluster at home | 09:47 |
| *** kukacz has quit IRC | 09:47 | |
| evrardjp | nor openstack with multiple hosts | 09:47 |
| evrardjp | I should ask first before telling that :p | 09:47 |
| *** kukacz has joined #openstack-ansible | 09:47 | |
| evrardjp | anyway | 09:48 |
| ashishjain | evrardjp: I ran a playbook manually and it worked now | 09:48 |
| evrardjp | ashishjain, no errors? | 09:48 |
| gparaskevas | well i am not maried i guess its qquite logical that to happen, my set up is quit small and quit, dell optiplex usff 745 x4! | 09:48 |
| ashishjain | but when I do it along with osad it does not | 09:48 |
| ashishjain | yes no errors | 09:48 |
| gparaskevas | quiet* | 09:48 |
| evrardjp | ashishjain, nice! | 09:48 |
| gparaskevas | odyssey4me: yes a page of that regard will be awesome | 09:49 |
| ashishjain | http://paste.openstack.org/show/475843/ | 09:49 |
| ashishjain | here is the playbook | 09:49 |
| evrardjp | ashishjain, I'll check | 09:49 |
| ashishjain | evrardjp: What I will do is delete the directory again trusty.... and than try running ansible playbook again to see if I hit the error again | 09:50 |
| ashishjain | just to check if their is an error | 09:50 |
| ashishjain | sorry a bug | 09:50 |
| evrardjp | yeah it sounds weird like that | 09:50 |
| *** fawadkhaliq has quit IRC | 09:51 | |
| evrardjp | maybe there was a failure in the download of the lxc template file | 09:51 |
| *** subscope has quit IRC | 09:52 | |
| evrardjp | it shouldn't because there is a sha checking, but still, deleting and retrying could be successful for you | 09:53 |
| evrardjp | are the optiplex noisy? | 09:55 |
| *** meteorfox has joined #openstack-ansible | 09:56 | |
| *** meteorfox has quit IRC | 09:57 | |
| evrardjp | ashishjain, after that, you can send your playbook failure? this way we know if it's the last change on lxc cache that triggers that failure or if it's something else | 09:59 |
| ashishjain | evrardjp: I think I found the issue | 09:59 |
| gparaskevas | evrardjp: they are old a nd the two of them are a bit noisy but i will replcae the two fans and they will not be as noisy, they are very good for that purpose and they be WAF friendly i guess | 09:59 |
| ashishjain | evrardjp: The issue is this condition in when: cache_download|changed | 10:00 |
| ashishjain | cache download not happens everytime | 10:00 |
| ashishjain | and hence if it does not change the unarchive process is skipped | 10:00 |
| evrardjp | which makes sense | 10:01 |
| ashishjain | If you think this is correct than I would love to submit a patch :) | 10:01 |
| evrardjp | no need to unarchive again if there is no change, right? | 10:01 |
| ashishjain | but what if it unarchive never happened | 10:02 |
| evrardjp | the interesting question is why was there no unarchive first | 10:02 |
| evrardjp | indeed :) | 10:02 |
| ashishjain | evrardjp: the reason is I will tell you | 10:02 |
| evrardjp | ctrl C? | 10:02 |
| ashishjain | In a playbook if one of the previous task is failed say "apt udpate" is failed all the subsequent tasks will not consider that particular host | 10:03 |
| evrardjp | even, the process should be resilient | 10:03 |
| evrardjp | yup | 10:03 |
| ashishjain | that has happened with me accidently I have updated the sources.list to something else and hence apt failed for me and than for all the subsequent tasks that host was ignored | 10:03 |
| ashishjain | and than we are hitting this issue of unachive | 10:04 |
| ashishjain | But is it an expected behavior if one task failed for a host and than don't consider it at all? | 10:04 |
| evrardjp | if there is a failure on a host, it's not continuing to run tasks on this host, unless specifically mentionned | 10:05 |
| evrardjp | it's ansible default behaviour, which is safe | 10:05 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 10:05 |
| *** fandi has quit IRC | 10:05 | |
| evrardjp | it can be overriden though, in many ways | 10:05 |
| evrardjp | still if a previous task failed, it shouldn't even download the cache on your host | 10:05 |
| ashishjain | evrardjp: Indeed !! | 10:06 |
| evrardjp | this is something that definitely needs more examination | 10:06 |
| evrardjp | but your problem is solved now? | 10:07 |
| evrardjp | because your redownloaded the cache on all your servers, right? | 10:07 |
| odyssey4me | mattt would you mind reviewing https://review.openstack.org/232955 ? | 10:07 |
| ashishjain | evrardjp: let me look into more closely in my log files I will get back | 10:07 |
| mattt | odyssey4me: sure gimme a min | 10:07 |
| ashishjain | evrardjp: Ya problem is resolved but still the behavior is not clear, I will get back | 10:08 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 10:12 |
| *** serverascode has joined #openstack-ansible | 10:16 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 10:16 |
| tiagogoems | Hi, why OSAD build the OpenStack python packages from source? | 10:16 |
| odyssey4me | tiagogoems so that we can react more quickly when security issues come out | 10:17 |
| *** Burgosz has quit IRC | 10:18 | |
| tiagogoems | odyssey4me right, so what the process of doing an update on an existing installation? Pull the latest changes for OSAD and re-run everything again? | 10:19 |
| tiagogoems | Or is there an update/upgrade script | 10:19 |
| odyssey4me | tiagogoems http://docs.openstack.org/developer/openstack-ansible/install-guide/app-minorupgrade.html | 10:21 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 10:23 |
| tiagogoems | odyssey4me ta, and what about major upgrades? | 10:23 |
| odyssey4me | tiagogoems we only have major upgrade instrumentation from juno->kilo at this stage, once we release liberty we'll start work on kilo->liberty | 10:24 |
| odyssey4me | tiagogoems https://blueprints.launchpad.net/openstack-ansible/+spec/liberty-upgrade-path | 10:24 |
| evrardjp | odyssey4me, I didn't know about this page with minor upgrades! Great job! | 10:24 |
| odyssey4me | the plan is to implement an upgrade framework | 10:24 |
| tiagogoems | odyssey4me cool, thanks | 10:25 |
| evrardjp | odyssey4me, I'm interested by the process here https://review.openstack.org/#/c/232987/ | 10:29 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fix bashate violation in galera_server/files/mysql_init.sh https://review.openstack.org/232997 | 10:29 |
| odyssey4me | evrardjp :) it'll be our first role with role syntax and lint test | 10:30 |
| evrardjp | you want all openstack-ansible-* roles to be galaxy ready? | 10:31 |
| odyssey4me | the next step will be to do a test for execution and idempotency | 10:31 |
| odyssey4me | evrardjp yep, with the eventual intention of registering them formally in galaxy | 10:31 |
| *** meteorfox has joined #openstack-ansible | 10:32 | |
| evrardjp | cool | 10:32 |
| evrardjp | I have no problems to move my changes there, to be under the openstack-ansible umbrella | 10:32 |
| evrardjp | I already do automated testing and idempotency on my roles | 10:32 |
| evrardjp | my test coverage is not that good though | 10:33 |
| evrardjp | but question | 10:33 |
| evrardjp | is it a good idea to have everything in one folder? | 10:33 |
| evrardjp | I thought it would be best to have one repo for the product (with playbooks, tests, etc) and one repo per role | 10:34 |
| evrardjp | so as openstack-ansible-security is a child product, I thought it was easier to have 2 repos: one for the playbooks and tests, another for the role | 10:35 |
| evrardjp | but it's maybe overkill | 10:35 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty https://review.openstack.org/226917 | 10:37 |
| gparaskevas | evrardjp: i deleted the secrets from all compute nodes and the playbook went ok, i am finidhing the installation but looks like that the issue is resolved, although i believe that if i rerun the playbook i will get the same issue as the secret will be already there | 10:39 |
| evrardjp | gparaskevas, it shouldn't | 10:39 |
| evrardjp | because it checks if the secret is already there | 10:39 |
| evrardjp | but you know the way to be certain of it, right? | 10:40 |
| evrardjp | ;) | 10:40 |
| gparaskevas | evrardjp: great then! i will retest it though just to be certain! :P | 10:40 |
| gparaskevas | evrardjp: haha | 10:40 |
| evrardjp | I don't remember having issues with that, excepting at the beginning | 10:40 |
| gparaskevas | evrardjp: yeah in the beginnign nothing ever works... i wonder why | 10:41 |
| *** harvy has quit IRC | 10:42 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fix the nodepool file check https://review.openstack.org/233003 | 10:47 |
| odyssey4me | evrardjp so the tests folder can hold the stuff needed for testing, but the openstack-ansible repo can be the place for integration testing and full use-case validation | 10:49 |
| odyssey4me | evrardjp for the moment I'm trying to re-use ansible role tests which are in place in -infra for other ansible roles - so I'm conforming to the existing expectations | 10:50 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty https://review.openstack.org/226917 | 10:53 |
| *** fawadkhaliq has joined #openstack-ansible | 10:55 | |
| *** subscope has joined #openstack-ansible | 10:59 | |
| *** fawadkhaliq has quit IRC | 10:59 | |
| evrardjp | odyssey4me, tell me when you want to take some of my roles over: I'd be happy to help with giving the roles, but also to help improve the gate checks | 11:01 |
| ashishjain | evrardjp: I think I found out the issue which probably is possible under heavy load situation | 11:04 |
| ashishjain | evrardjp: fatal: [openstack008] => SSH Error: Failed to connect to new control master while connecting to 192.168.30.8:22 It is sometimes useful to re-run the command using -vvvv, which prints SSH debug output to help diagnose the issue | 11:04 |
| ashishjain | Here is what has happened immediately after downloading the lxc cache | 11:04 |
| odyssey4me | evrardjp where the roles live is kind-of immaterial - I would say that if most of the people developing the roles are within the openstack community, then it makes sense to have the code hosted in openstack's infrastructure... otherwise github is perhaps better | 11:05 |
| odyssey4me | the workflow for gerrit is not trivial, and can turn away potential developers who are used to github's workflow | 11:05 |
| odyssey4me | ashishjain are you executing each playbook, or are you using something like run-playbooks? | 11:06 |
| *** kukacz_ has quit IRC | 11:06 | |
| odyssey4me | also ashishjain - what tag are you using for your git clone? | 11:06 |
| odyssey4me | ashishjain this may be useful information for you: http://docs.openstack.org/developer/openstack-ansible/install-guide/app-tips.html | 11:07 |
| ashishjain | after downloading the cache due to load ( My node has got 1 core, 6G RAM and 35 GB Disk) ... deployment node was not able to contact 192.168.30.8 in stipulated 120 seconds time | 11:09 |
| odyssey4me | javeriak both your reviews have passed the gate :) | 11:11 |
| odyssey4me | javeriak It'd be really good if there was a documentation entry in the install guide for how to use this functionality. :) | 11:12 |
| ashishjain | odyssey4me: I am executing each playbook, I am using kilo | 11:12 |
| javeriak | odyssey4me, yes i saw :), thanks for that catch, here i was continously rebasing it | 11:12 |
| javeriak | odyssey4me, sure thats a really good idea, I'd be happy to add documentation, where would you suggest it goes, as a seperate heading/page? | 11:13 |
| odyssey4me | javeriak not sure really, it depends on the sort of informaiton added | 11:14 |
| odyssey4me | perhaps somewhere here? http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-networking.html | 11:14 |
| odyssey4me | javeriak alternatively, if you're really stuck for where to put it - I'd suggest adding an Appendix, then we can always work it from there | 11:15 |
| javeriak | well our main stuff lies here: https://github.com/plumgrid/plumgrid-ansible, i can add a similar overview to openstack-ansible docs and link to the pg playbooks? | 11:15 |
| odyssey4me | javeriak that sounds like a good idea - add an appendix for how to use plumgrid with openstack-ansible | 11:17 |
| odyssey4me | I can see some instructions there could be better :p | 11:17 |
| javeriak | odyssey4me, alright appendix it is, these are for juno and admittingly sparse :) because we like to usually point to our official deployment guide that contains detailed instructions. I've yet to update our plays for kilo, just waiting on these patches to merge in osad | 11:20 |
| *** subscope has quit IRC | 11:20 | |
| javeriak | But will clean em up and add to the openstack-ansible appendix | 11:21 |
| odyssey4me | javeriak The doc entry can be a simple set of instructions, similar to the README, with a link to the detailed official guide. | 11:21 |
| odyssey4me | through the review process we'll help you make them better :) | 11:21 |
| *** subscope has joined #openstack-ansible | 11:22 | |
| javeriak | odyssey4me sounds good, where does the Appendix lie btw, cant find it here -> openstack-ansible/doc/source/install-guide | 11:23 |
| *** fawadkhaliq has joined #openstack-ansible | 11:25 | |
| javeriak | or maybe I could just add a new doc page if that sounds right? | 11:27 |
| *** fawadkhaliq has quit IRC | 11:28 | |
| *** fawadkhaliq has joined #openstack-ansible | 11:28 | |
| *** subscope has quit IRC | 11:29 | |
| *** _hanhart has quit IRC | 11:32 | |
| odyssey4me | javeriak yeah, something like app-plumgrid.rst - then just add it to the TOC in doc/source/install-guide/index.rst | 11:32 |
| javeriak | okay cool | 11:32 |
| *** alejandrito has joined #openstack-ansible | 11:32 | |
| *** subscope has joined #openstack-ansible | 11:34 | |
| openstackgerrit | Merged openstack/openstack-ansible-security: V-38535: Don't respond to ICMPv4 broadcast https://review.openstack.org/232198 | 11:35 |
| openstackgerrit | Merged openstack/openstack-ansible-security: V-3851{8,9}: Log file ownership https://review.openstack.org/232171 | 11:35 |
| openstackgerrit | Merged openstack/openstack-ansible-security: V-385{69,70,71,72}: Password requirements https://review.openstack.org/232231 | 11:36 |
| openstackgerrit | Merged openstack/openstack-ansible-security: V-3862{5,6,7}: LDAP server security https://review.openstack.org/232246 | 11:36 |
| *** subscope has quit IRC | 11:44 | |
| *** subscope has joined #openstack-ansible | 11:45 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 11:46 |
| odyssey4me | mattt could you please review https://review.openstack.org/232987 to for the security repo | 11:46 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 11:47 |
| mattt | odyssey4me: sure | 11:49 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty https://review.openstack.org/229967 | 11:50 |
| odyssey4me | mattt then this one when you're done with that: https://review.openstack.org/233003 | 11:52 |
| *** pradk has joined #openstack-ansible | 12:00 | |
| mattt | odyssey4me: done | 12:01 |
| odyssey4me | thanks mattt | 12:01 |
| mattt | np | 12:01 |
| *** brice_ has joined #openstack-ansible | 12:02 | |
| *** tlian has joined #openstack-ansible | 12:02 | |
| openstackgerrit | Merged openstack/openstack-ansible: Implement a fall back URL for get-pip.py https://review.openstack.org/232669 | 12:03 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty https://review.openstack.org/226917 | 12:08 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Keystone Configuration for Liberty https://review.openstack.org/226917 | 12:13 |
| *** subscope has quit IRC | 12:29 | |
| *** subscope has joined #openstack-ansible | 12:29 | |
| *** subscope has quit IRC | 12:31 | |
| *** subscope has joined #openstack-ansible | 12:33 | |
| *** kerwin_bai has quit IRC | 12:34 | |
| javeriak | odyssey4me should i wait for my commits to merge before backporting? | 12:45 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Rearrange group_vars/all into a directory with smaller files https://review.openstack.org/233033 | 12:46 |
| odyssey4me | javeriak yes please | 12:46 |
| odyssey4me | javeriak the reason is that reviewers may still request further changes | 12:47 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root https://review.openstack.org/232070 | 12:47 |
| javeriak | right, makes sense | 12:47 |
| *** kerwin_bai has joined #openstack-ansible | 12:49 | |
| mgariepy | good morning everyone ! | 12:50 |
| odyssey4me | o/ mgariepy | 12:50 |
| mgariepy | how are you doing ? | 12:51 |
| *** markvoelker has joined #openstack-ansible | 12:54 | |
| *** fawadkhaliq has quit IRC | 12:55 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins https://review.openstack.org/232074 | 12:55 |
| *** markvoelker_ has quit IRC | 12:58 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3850{2,3,4}: Ownership/mode of /etc/shadow https://review.openstack.org/232087 | 12:58 |
| *** KLevenstein has joined #openstack-ansible | 12:59 | |
| mhayden | kudos to odyssey4me for getting the security docs flowing! http://docs.openstack.org/developer/openstack-ansible-security/ | 12:59 |
| *** manikanta has quit IRC | 12:59 | |
| *** fawadkhaliq has joined #openstack-ansible | 13:01 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty https://review.openstack.org/229967 | 13:03 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3851{4,5,6,7}: Disabling certain network protocols https://review.openstack.org/232129 | 13:04 |
| *** scarlisle has joined #openstack-ansible | 13:05 | |
| *** fawadkhaliq has quit IRC | 13:06 | |
| *** gjn has quit IRC | 13:11 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38539: Enable TCP SYN cookies https://review.openstack.org/232212 | 13:11 |
| *** tiagogomes_ has joined #openstack-ansible | 13:14 | |
| *** tiagogoems has quit IRC | 13:14 | |
| evrardjp | hello mgariepy | 13:17 |
| odyssey4me | mattt I missed one of the bashate violations - please review: https://review.openstack.org/232997 | 13:18 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38637: Verify auditd pkg contents https://review.openstack.org/232767 | 13:18 |
| mhayden | mattt: i think i tidied up the commits you reviewed for the security stuff | 13:19 |
| *** cloudtrainme has joined #openstack-ansible | 13:21 | |
| evrardjp | mgariepy: FYI I'm using my own haproxy for now. I'd be happy to share what I did with you. It's maybe overkill for your use case, but I thought you could need that | 13:23 |
| mgariepy | that would be nice i would like to see it. | 13:24 |
| mattt | mhayden: cool LGTM | 13:25 |
| mhayden | thanks for the assist, mattt | 13:25 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Add new docs URL to README https://review.openstack.org/233054 | 13:26 |
| mattt | odyssey4me: kinda wishing we had added that file as an ignore as sigmavirus24_awa suggested | 13:26 |
| evrardjp | mhayden, you need help on these? | 13:26 |
| mhayden | evrardjp: the reviews? sure! | 13:26 |
| mhayden | evrardjp: https://review.openstack.org/#/q/status:open+project:openstack/openstack-ansible-security,n,z | 13:27 |
| odyssey4me | mattt I know what you mean, except I'd rather we do away with the file and use the default from the package where possible. | 13:27 |
| mattt | odyssey4me: agreed, which we're doing in master right? | 13:27 |
| odyssey4me | mattt yeah, that's done for liberty along with the MariaDB 10 upgrade. | 13:28 |
| odyssey4me | so for kilo this may as well just stay there - it's not likely to change again | 13:28 |
| *** wmlynch has joined #openstack-ansible | 13:30 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Removing 'indices/tables' from index.rst https://review.openstack.org/233058 | 13:31 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fix bashate violation in galera_server/files/mysql_init.sh https://review.openstack.org/232997 | 13:31 |
| odyssey4me | mattt done | 13:31 |
| *** javeriak has quit IRC | 13:35 | |
| *** galstrom_zzz is now known as galstrom | 13:43 | |
| openstackgerrit | Toby Oxborrow proposed openstack/openstack-ansible: Redirect "apt-get install -y" stdin to /dev/null https://review.openstack.org/233060 | 13:44 |
| gparaskevas | odyssey4me: regarding teardownscript, i dont know if this is a bug but, if you have openstack-deploy and controller or any other hosts on the same server then teardown.sh will delete etc/openstack_deploy prior to finishing making the script to fail due to inventory missing | 13:48 |
| odyssey4me | gparaskevas haha, sounds like a bug | 13:48 |
| gparaskevas | odyssey4me: yeah its a bug if you dont have enough machines :P | 13:49 |
| odyssey4me | gparaskevas I would think that /etc/openstack_deploy should be left alone actually - it's supposed to only tear down the containers and remove the services on the hosts | 13:49 |
| gparaskevas | yes , i believe it deletes folder with wildcards so if the host of openstack_deploy happens to be on tha same server as the controller then it gets deleted | 13:50 |
| gparaskevas | let me check | 13:50 |
| evrardjp | +1 I'd rather NOT delete /etc/openstack_deploy | 13:50 |
| evrardjp | up to the deployer to remove it if he wants to | 13:51 |
| gparaskevas | actualy its mentioned on the beggining | 13:51 |
| gparaskevas | that it will be deleted | 13:51 |
| gparaskevas | so its a feature | 13:51 |
| gparaskevas | :P | 13:51 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: [WIP] Rearrange group_vars/all into a directory with smaller files https://review.openstack.org/233033 | 13:51 |
| *** ashishjain has quit IRC | 13:54 | |
| gparaskevas | odyssey4me: so it documented that it does delete openstack_deploy but it seems to be causing the script to fail -> http://cdn.pasteraw.com/52pihjsfa67045qb68yq3e4dpy034yq | 13:54 |
| gparaskevas | should i commit a patch? | 13:55 |
| odyssey4me | gparaskevas go for it - be sure to also commit docs changes where needed :) | 13:55 |
| evrardjp | odyssey4me, while we are touching this, wouldn't be smarter to allow users to manage their group_vars? | 13:56 |
| odyssey4me | evrardjp you're talking about https://review.openstack.org/233033 ? if so, that's an experiment right now. | 13:57 |
| evrardjp | yup | 13:57 |
| *** galstrom is now known as galstrom_zzz | 13:57 | |
| odyssey4me | evrardjp yeah, we can rethink all that in the mitaka timeframe - I just wanted to see whether this works :) | 13:58 |
| evrardjp | I've tested almost the same thing here | 13:59 |
| evrardjp | I'm using folders for managing groups, so it should work | 13:59 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3857{4,6,7}: Password hashing algorithms https://review.openstack.org/233071 | 14:01 |
| evrardjp | if we'll ever re-read this conversation, I think we should have a group "baremetal" instead of is_metal: True | 14:01 |
| gparaskevas | odyssey4me: should i create a patch for it? should i check out if no bug is created? | 14:01 |
| odyssey4me | lol evrardjp | 14:02 |
| gparaskevas | odyssey4me: should i file a bug for it? should i check out if no bug is created?**** | 14:02 |
| *** galstrom_zzz is now known as galstrom | 14:02 | |
| odyssey4me | gparaskevas all of the above :) | 14:02 |
| gparaskevas | odyssey4me: splendid | 14:02 |
| *** jwagner_away is now known as jwagner | 14:02 | |
| *** fawadkhaliq has joined #openstack-ansible | 14:02 | |
| evrardjp | odyssey4me, I gave my opinion I can now rest in peace... | 14:03 |
| evrardjp | mhayden, I'd happy to help about the reviewing | 14:04 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:05 | |
| evrardjp | however I'm going to be a pain: I'll ask to justify stuff :p | 14:05 |
| *** fawadkhaliq has quit IRC | 14:06 | |
| *** jwagner is now known as jwagner_away | 14:07 | |
| sigmavirus24 | mattt: are you saying I'm right? This never happens | 14:08 |
| gparaskevas | odyssey4me evrardjp cloudnull :: i cannot file a bug or at least i cannot find the button on launchpad. If you find the time and file it(or if you can enable me) i already have the patch! | 14:09 |
| mattt | sigmavirus24: i didn't like to admit it but you know ... :) | 14:09 |
| odyssey4me | gparaskevas put the patch up for review, but the 'report a bug' is on the top right hand corner | 14:10 |
| evrardjp | there is a register a bug button | 14:10 |
| sigmavirus24 | I'm taking the day off to recover from this revelation mattt | 14:10 |
| sigmavirus24 | See you all Monday | 14:10 |
| evrardjp | yeah report, sorry | 14:10 |
| evrardjp | hehe sigmavirus24 | 14:10 |
| odyssey4me | gparaskevas https://bugs.launchpad.net/openstack-ansible (top right hand corner) | 14:10 |
| *** arnaud_orange1 has joined #openstack-ansible | 14:11 | |
| *** javeriak has joined #openstack-ansible | 14:11 | |
| *** arnaud_orange has quit IRC | 14:11 | |
| mattt | sigmavirus24: enjoy! :) | 14:13 |
| evrardjp | mhayden, the link to security docs in the README is on read the docs... shouldn't it be on docs.openstack now? | 14:13 |
| mhayden | evrardjp: i have a review in to fix that link ;) | 14:13 |
| mhayden | https://review.openstack.org/#/c/233054/ | 14:13 |
| evrardjp | sorry mhayden | 14:14 |
| mhayden | evrardjp: no worries | 14:15 |
| mhayden | still finishing coffee here :P | 14:15 |
| evrardjp | quick question about this project, is it possible to enable only a category of configuration? | 14:16 |
| *** Mudpuppy has joined #openstack-ansible | 14:16 | |
| mhayden | evrardjp: using tags, yes | 14:16 |
| mhayden | like -t cat2 | 14:16 |
| mhayden | or -t cat3 | 14:16 |
| evrardjp | ok | 14:16 |
| evrardjp | could you document it then? | 14:17 |
| tiagogomes_ | hi, how can I override the neutron policy? | 14:17 |
| evrardjp | and describe what the category means? | 14:17 |
| odyssey4me | tiagogomes_ http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-openstack.html | 14:17 |
| tiagogomes_ | odyssey4me awesome, I assume it will overwrite existing keys? | 14:18 |
| odyssey4me | tiagogomes_ it will override anything | 14:19 |
| odyssey4me | tiagogomes_ and you can use jinja in your override dict too if you'd like | 14:19 |
| openstackgerrit | Merged openstack/openstack-ansible: Implementation of keepalived for haproxy https://review.openstack.org/218818 | 14:19 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix the nodepool file check https://review.openstack.org/233003 | 14:20 |
| *** k_stev has joined #openstack-ansible | 14:20 | |
| *** spotz_zzz is now known as spotz | 14:21 | |
| mhayden | evrardjp: good idea | 14:21 |
| mhayden | evrardjp: could you open a bug for that? :) | 14:21 |
| mhayden | otherwise it will escape my mind :) | 14:22 |
| *** javeriak has quit IRC | 14:22 | |
| *** jwagner_away is now known as jwagner | 14:22 | |
| tiagogomes_ | odyssey4me ta, and what about major upgrades? | 14:23 |
| tiagogomes_ | odyssey4me, sorry, bad irc client | 14:23 |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Fix the nodepool file check https://review.openstack.org/233090 | 14:23 |
| odyssey4me | tiagogomes_that'll be worked on after the release of liberty: https://blueprints.launchpad.net/openstack-ansible/+spec/liberty-upgrade-path | 14:24 |
| *** jwagner is now known as jwagner_away | 14:25 | |
| *** javeriak_ has joined #openstack-ansible | 14:26 | |
| *** Mudpuppy has quit IRC | 14:26 | |
| openstackgerrit | George Paraskevas proposed openstack/openstack-ansible: Remove openstack_deploy from teardown.sh deletion list https://review.openstack.org/233092 | 14:26 |
| *** Mudpuppy has joined #openstack-ansible | 14:27 | |
| gparaskevas | odyssey4me: https://review.openstack.org/#/c/233092/ | 14:28 |
| *** markvoelker has quit IRC | 14:29 | |
| openstackgerrit | Merged openstack/openstack-ansible-security: Enable role testing and make structure ansible-galaxy compatible https://review.openstack.org/232987 | 14:29 |
| *** jwagner_away is now known as jwagner | 14:32 | |
| evrardjp | mhayden, you have a space on launchpad, or is it on github issues? | 14:32 |
| evrardjp | that could be documented too ;) | 14:33 |
| mhayden | evrardjp: good pont | 14:33 |
| mhayden | point | 14:33 |
| mhayden | i think it's in the plain openstack-ansible project unless odyssey4me knows of a different place | 14:34 |
| evrardjp | I have to go though | 14:34 |
| evrardjp | I hope I'll not forget to file these bugs when I know where I'll have to place them :p | 14:34 |
| alextricity | cloudnull: RE: Unable to manage members of a project through horizon. I saw that you replied but I didn't get the message. | 14:35 |
| *** jwagner is now known as jwagner_away | 14:35 | |
| *** jwagner_away is now known as jwagner | 14:35 | |
| alextricity | I need to set up that bouncer you told me about | 14:35 |
| alextricity | And increase my scrollback | 14:35 |
| openstackgerrit | Merged openstack/openstack-ansible: Modularizing Neutron playbooks for master https://review.openstack.org/231187 | 14:35 |
| openstackgerrit | Merged openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup https://review.openstack.org/231214 | 14:35 |
| palendae | mhayden: Seems splitting out roles, to me, would be splitting out everything | 14:35 |
| openstackgerrit | Merged openstack/openstack-ansible: Removed unnecessary comment in the user_secrets for ceph variable https://review.openstack.org/232957 | 14:35 |
| cloudnull | alextricity: znc for the win | 14:36 |
| cloudnull | BOOM javeriak_ ^ PLUMgrid & Neutron Modularized Plugin now supported in master | 14:37 |
| cloudnull | :) | 14:37 |
| odyssey4me | javeriak_ you may backport your patches to kilo now :) | 14:38 |
| cloudnull | ^ ++ | 14:38 |
| odyssey4me | mhayden yeah, you should probably make reference in the README for where to do things like file bugs, etc | 14:38 |
| odyssey4me | the role is part of the openstack-ansible big tent, so bugs/blueprints/etc use the openstack-ansible launchpad and process | 14:39 |
| evrardjp | alextricity, ZNC indeed :) | 14:39 |
| evrardjp | I'm also interested by the answer of cloudnull to horizon member management | 14:40 |
| alextricity | Downloading it now! So does anybody know about not being able to edit projects through horizon? | 14:40 |
| alextricity | Or is it just me? | 14:40 |
| cloudnull | yea? ^ moar datas | 14:40 |
| javeriak_ | cloudnull, odyssey4me yay! thanks guys :) | 14:40 |
| alextricity | After finishing up a base OSD AIO, trying to edit projects through horizon results in a HTTP 500 | 14:41 |
| alextricity | That's all I get in the logs O_O | 14:41 |
| cloudnull | thank you javeriak_ | 14:41 |
| odyssey4me | alextricity is that on a master build, or kilo? | 14:41 |
| alextricity | master | 14:41 |
| odyssey4me | alextricity and how long ago did you clone the repo? | 14:42 |
| alextricity | hmm.maybe about 3 or 4 days ago | 14:42 |
| evrardjp | alextricity, using admin role it works | 14:42 |
| alextricity | hmm.I wonder why it doesn't work for me | 14:43 |
| odyssey4me | alextricity so there were some bugs pretty recently, I'd suggest that you update the clone to the latest master - add this patch: https://review.openstack.org/232955 | 14:44 |
| odyssey4me | that it most likely the final rc point for liberty upstream | 14:44 |
| openstackgerrit | George Paraskevas proposed openstack/openstack-ansible: Remove openstack_deploy from teardown.sh deletion list https://review.openstack.org/233099 | 14:44 |
| tiagogomes_ | who from here was looking into l3_ha? I found a bug | 14:44 |
| tiagogomes_ | :q | 14:44 |
| alextricity | odyssey4me: will do! Thanks | 14:44 |
| odyssey4me | alextricity then go through the process of updating as per a minor version update: http://docs.openstack.org/developer/openstack-ansible/install-guide/app-minorupgrade.html | 14:44 |
| cloudnull | tiagogomes_: i was looking into that | 14:46 |
| evrardjp | tiagogomes_, neutron? I was looking too | 14:46 |
| tiagogomes_ | right, neutron-keepalived-state-change is installed on /usr/local/bin, but the rootwrap.conf is not configured to allow executing commands from there | 14:47 |
| alextricity | I need to use serveral variables across roles. Would the best place to put those variables be inventory/group_vars/hosts.yml? | 14:50 |
| openstackgerrit | George Paraskevas proposed openstack/openstack-ansible: Remove openstack_deploy from teardown.sh deletion list https://review.openstack.org/233099 | 14:51 |
| gparaskevas | odyssey4me: https://review.openstack.org/#/c/233099/ accidentaly submited as new forgot to commit -a --amend, dont be harsh :P | 14:52 |
| odyssey4me | lol gparaskevas ah, I was wondering what happened | 14:54 |
| odyssey4me | gparaskevas no problem - abandoned the older one | 14:55 |
| gparaskevas | odyssey4me: yeah i forgot to -a --amend right? that was it i believe | 14:56 |
| odyssey4me | gparaskevas yep | 14:56 |
| *** markvoelker has joined #openstack-ansible | 14:57 | |
| gparaskevas | odyssey4me: great! | 14:57 |
| *** neilus has quit IRC | 14:58 | |
| javeriak_ | guys, quick question, i see a br-snet in the example interface file, but theres no description of it in the install guide, neither have i ever created one on my setups, so what exactly is it for? | 14:59 |
| odyssey4me | javeriak_ that's a legacy and it supposed to be removed | 14:59 |
| palendae | I think that's servicenet | 14:59 |
| palendae | Not applicable to most installs | 15:00 |
| javeriak_ | oh okay | 15:02 |
| *** pradk has quit IRC | 15:03 | |
| *** fawadkhaliq has joined #openstack-ansible | 15:03 | |
| *** pradk has joined #openstack-ansible | 15:04 | |
| *** jwagner is now known as jwagner_away | 15:07 | |
| *** fawadkhaliq has quit IRC | 15:08 | |
| openstackgerrit | Miguel Alex Cantu proposed openstack/openstack-ansible: Seperated out Telemetry Alarming (Aodh) https://review.openstack.org/232224 | 15:08 |
| openstackgerrit | Miguel Alex Cantu proposed openstack/openstack-ansible: Add OpenID Connect RP Apache Module https://review.openstack.org/226617 | 15:12 |
| *** sdake has joined #openstack-ansible | 15:12 | |
| *** fawadkhaliq has joined #openstack-ansible | 15:14 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty https://review.openstack.org/229967 | 15:15 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: [backport] Modularizing Neutron playbooks for master https://review.openstack.org/233115 | 15:15 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: [backport] Modularizing Neutron playbooks for master https://review.openstack.org/233115 | 15:17 |
| odyssey4me | javeriak_ typically backports are done using cherry-pick -x to show the originating commit with the message | 15:18 |
| javeriak_ | odyssey4me, by using a -x with the cherrypick command? | 15:19 |
| odyssey4me | javeriak_ yep | 15:19 |
| javeriak_ | oh okay, shall i abandon and push again? | 15:19 |
| odyssey4me | javeriak_ no need - just modify the commit message | 15:20 |
| odyssey4me | also, no need for the edited title :) | 15:20 |
| javeriak_ | haha, sorry odyssey4me, i was following our internal bakport formats, thought u guys added backports to the titles too | 15:21 |
| jasondotstar | stevelle: ping re: Bug#1469868 | 15:25 |
| stevelle | pong jasondotstar | 15:25 |
| jasondotstar | hey... looking the bug this am..... qq: so basically we need to land all the .json files that define the metadefs in /etc/metadefs/ ? | 15:26 |
| jasondotstar | stevelle: ^ | 15:27 |
| stevelle | reviewing real quick | 15:27 |
| jasondotstar | the list of .json file is here: https://github.com/openstack/glance/tree/master/etc/metadefs | 15:27 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master https://review.openstack.org/233119 | 15:27 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments https://review.openstack.org/233120 | 15:27 |
| jasondotstar | s/file/files | 15:28 |
| mhayden | odyssey4me: aaaah, the -1's, they burn! :P | 15:28 |
| *** subscope has quit IRC | 15:28 | |
| stevelle | mhayden: smells like quality :D | 15:29 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3857{4,6,7}: Password hashing algorithms https://review.openstack.org/233071 | 15:29 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38637: Verify auditd pkg contents https://review.openstack.org/232767 | 15:29 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38539: Enable TCP SYN cookies https://review.openstack.org/232212 | 15:30 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3851{4,5,6,7}: Disabling certain network protocols https://review.openstack.org/232129 | 15:30 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3850{2,3,4}: Ownership/mode of /etc/shadow https://review.openstack.org/232087 | 15:31 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins https://review.openstack.org/232074 | 15:31 |
| *** jaypipes is now known as leakypipes | 15:31 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root https://review.openstack.org/232070 | 15:31 |
| stevelle | jasondotstar: so the metadefs should be in the wheel now, we will need to add the "glance-manage db_load_metadefs ..." task as a step post install | 15:31 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38498: Audit log file permissions https://review.openstack.org/232056 | 15:32 |
| jasondotstar | ah. i see. they are included. just need to run the cmd at the end of the playbook... | 15:32 |
| jasondotstar | stevelle: ok got it. | 15:32 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup https://review.openstack.org/233123 | 15:33 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38496: Lock system accounts other than root https://review.openstack.org/232012 | 15:34 |
| mhayden | okay, i think all of those are rebased now | 15:34 |
| openstackgerrit | Merged openstack/openstack-ansible: Update nova & tempest SHA's and remove django-openstack-auth SHA https://review.openstack.org/232955 | 15:37 |
| openstackgerrit | Merged openstack/openstack-ansible: Fix bashate violation in galera_server/files/mysql_init.sh https://review.openstack.org/232997 | 15:37 |
| *** arnaud_orange1 has quit IRC | 15:39 | |
| *** arnaud_orange has joined #openstack-ansible | 15:40 | |
| *** gparaskevas has quit IRC | 15:45 | |
| *** persia has quit IRC | 15:46 | |
| *** persia has joined #openstack-ansible | 15:47 | |
| *** javeriak_ has quit IRC | 15:52 | |
| openstackgerrit | Miguel Alex Cantu proposed openstack/openstack-ansible: Seperated out Telemetry Alarming (Aodh) https://review.openstack.org/232224 | 15:52 |
| *** ganderson has joined #openstack-ansible | 15:54 | |
| *** kerwin_bai has quit IRC | 15:55 | |
| openstackgerrit | Miguel Alex Cantu proposed openstack/openstack-ansible: Seperated out Telemetry Alarming (Aodh) https://review.openstack.org/232224 | 15:59 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38655: Mount w/no exec exception https://review.openstack.org/233147 | 16:00 |
| *** arnaud_orange has quit IRC | 16:00 | |
| *** phalmos has joined #openstack-ansible | 16:00 | |
| *** phalmos has quit IRC | 16:02 | |
| *** scarlisle has quit IRC | 16:03 | |
| *** phalmos has joined #openstack-ansible | 16:03 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Modularizing Neutron playbooks for master https://review.openstack.org/233119 | 16:05 |
| *** galstrom is now known as galstrom_zzz | 16:05 | |
| *** sdake_ has joined #openstack-ansible | 16:06 | |
| *** sdake has quit IRC | 16:06 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Removed unnecessary comment in the user_secrets for ceph variable https://review.openstack.org/233152 | 16:08 |
| *** ganderson has quit IRC | 16:18 | |
| *** ganderson has joined #openstack-ansible | 16:18 | |
| *** tiagogomes_ has quit IRC | 16:18 | |
| *** phalmos has quit IRC | 16:19 | |
| *** jwagner_away is now known as jwagner | 16:20 | |
| *** g3rms_ has joined #openstack-ansible | 16:23 | |
| *** javeriak has joined #openstack-ansible | 16:25 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Switch from MySQL-python to PyMySQL https://review.openstack.org/233172 | 16:27 |
| openstackgerrit | Javeria Khan proposed openstack/openstack-ansible: Adding PLUMgrid plugin option to neutron setup https://review.openstack.org/233123 | 16:27 |
| *** sdake_ is now known as sdake | 16:28 | |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Updated the repo-build process https://review.openstack.org/230716 | 16:34 |
| *** jwagner is now known as jwagner_lunch | 16:39 | |
| *** jwagner_lunch is now known as jwagner_away | 16:40 | |
| *** KLevenstein has quit IRC | 16:40 | |
| *** phalmos has joined #openstack-ansible | 16:49 | |
| *** phalmos has quit IRC | 17:06 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Update Glance Configuration for Liberty https://review.openstack.org/229967 | 17:09 |
| *** markvoelker has quit IRC | 17:12 | |
| *** javeriak_ has joined #openstack-ansible | 17:13 | |
| *** javeriak has quit IRC | 17:17 | |
| *** fawadkhaliq has quit IRC | 17:18 | |
| *** fawadkhaliq has joined #openstack-ansible | 17:24 | |
| *** fawadkhaliq has quit IRC | 17:24 | |
| *** fawadkhaliq has joined #openstack-ansible | 17:24 | |
| *** fawadkhaliq has quit IRC | 17:25 | |
| *** elo has joined #openstack-ansible | 17:33 | |
| openstackgerrit | Merged openstack/openstack-ansible: Remove openstack_deploy from teardown.sh deletion list https://review.openstack.org/233099 | 17:34 |
| openstackgerrit | Merged openstack/openstack-ansible: Documentation: Syntax checking before running playbooks https://review.openstack.org/232443 | 17:34 |
| openstackgerrit | Merged openstack/openstack-ansible: Redirect "apt-get install -y" stdin to /dev/null https://review.openstack.org/233060 | 17:34 |
| *** alop has joined #openstack-ansible | 17:35 | |
| *** KLevenstein has joined #openstack-ansible | 17:39 | |
| openstackgerrit | Jesse Pretorius proposed openstack/openstack-ansible: Set Keystone endpoints to be versionless https://review.openstack.org/205192 | 17:47 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-386**: Disabling various unneeded services https://review.openstack.org/233198 | 17:49 |
| *** sdake has quit IRC | 17:53 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents https://review.openstack.org/232767 | 17:54 |
| *** sdake has joined #openstack-ansible | 17:54 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents https://review.openstack.org/232767 | 17:54 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38655: Mount w/noexec exception https://review.openstack.org/233147 | 17:55 |
| *** alextricity has quit IRC | 17:59 | |
| *** javeriak has joined #openstack-ansible | 18:04 | |
| *** scarlisle has joined #openstack-ansible | 18:06 | |
| *** javeriak_ has quit IRC | 18:06 | |
| *** sdake has quit IRC | 18:07 | |
| *** javeriak_ has joined #openstack-ansible | 18:09 | |
| *** javeriak has quit IRC | 18:09 | |
| *** fawadkhaliq has joined #openstack-ansible | 18:13 | |
| *** jwagner_away is now known as jwagner | 18:13 | |
| *** fawadk has joined #openstack-ansible | 18:15 | |
| *** KLevenstein_ has joined #openstack-ansible | 18:16 | |
| *** KLevenstein has quit IRC | 18:16 | |
| *** KLevenstein_ is now known as KLevenstein | 18:16 | |
| *** fawadkhaliq has quit IRC | 18:17 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38621: System clock sync https://review.openstack.org/233209 | 18:25 |
| *** gparaskevas has joined #openstack-ansible | 18:26 | |
| *** sdake has joined #openstack-ansible | 18:31 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 18:34 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:35 | |
| gparaskevas | i am cherry picking that-> https://review.openstack.org/#/c/233099/ for kilo | 18:36 |
| *** cloudtrainme has quit IRC | 18:36 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3865{6,7}: Samba https://review.openstack.org/233215 | 18:42 |
| *** javeriak has joined #openstack-ansible | 18:43 | |
| *** javeriak_ has quit IRC | 18:45 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38643: World writable files https://review.openstack.org/233216 | 18:49 |
| *** fawadkhaliq has joined #openstack-ansible | 18:49 | |
| *** fawadk has quit IRC | 18:52 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38658: Password reuse restrictions https://review.openstack.org/233219 | 18:52 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38659: Encrypted storage exception docs https://review.openstack.org/233221 | 18:56 |
| *** fawadk has joined #openstack-ansible | 19:01 | |
| *** cloudtrainme has joined #openstack-ansible | 19:02 | |
| *** fawadkhaliq has quit IRC | 19:03 | |
| cloudnull | gparaskevas: if you can cherry-pick that , it'd be awesome | 19:05 |
| openstackgerrit | George Paraskevas proposed openstack/openstack-ansible: Remove openstack_deploy from teardown.sh deletion list https://review.openstack.org/233224 | 19:06 |
| cloudnull | ++ | 19:06 |
| gparaskevas | :P | 19:06 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Updates the lint check to ignore templates https://review.openstack.org/231101 | 19:08 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Implement keystone venv support https://review.openstack.org/229513 | 19:08 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38660: SNMPv3 https://review.openstack.org/233226 | 19:08 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38659, V-38662: Encrypted storage exception docs https://review.openstack.org/233221 | 19:12 |
| *** harlowja has quit IRC | 19:12 | |
| *** alextricity-mobi has joined #openstack-ansible | 19:13 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-386{67,70}: Run AIDE via cron https://review.openstack.org/233231 | 19:21 |
| *** jwagner is now known as jwagner_away | 19:21 | |
| *** k_stev has quit IRC | 19:22 | |
| *** k_stev has joined #openstack-ansible | 19:23 | |
| *** jwagner_away is now known as jwagner | 19:24 | |
| *** harlowja has joined #openstack-ansible | 19:24 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38678: Auditd space_left size https://review.openstack.org/233237 | 19:31 |
| *** alextricity-mobi has quit IRC | 19:35 | |
| *** daneyon has joined #openstack-ansible | 19:36 | |
| *** jwagner is now known as jwagner_away | 19:37 | |
| *** alextricity-mobi has joined #openstack-ansible | 19:37 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38671: Remove sendmail https://review.openstack.org/233242 | 19:37 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38672: Remove netconsole service https://review.openstack.org/233243 | 19:40 |
| *** jwagner_away is now known as jwagner | 19:41 | |
| *** jwagner is now known as jwagner_away | 19:44 | |
| *** daneyon_ has joined #openstack-ansible | 19:44 | |
| *** KLevenstein_ has joined #openstack-ansible | 19:45 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38680: Audit log capacity notifications https://review.openstack.org/233247 | 19:45 |
| *** KLevenstein has quit IRC | 19:46 | |
| *** KLevenstein_ is now known as KLevenstein | 19:46 | |
| *** jwagner_away is now known as jwagner | 19:47 | |
| *** daneyon has quit IRC | 19:47 | |
| *** jwagner is now known as jwagner_away | 19:47 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-386{67,70}: Run AIDE via cron https://review.openstack.org/233231 | 19:48 |
| *** k_stev has quit IRC | 19:49 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-386{67,70}: Run AIDE via cron https://review.openstack.org/233231 | 19:50 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38659, V-38662: Encrypted storage exception docs https://review.openstack.org/233221 | 19:51 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38659, V-38662, V-38693: Encrypted storage exception docs https://review.openstack.org/233221 | 19:55 |
| *** cloudtrainme has quit IRC | 19:57 | |
| *** fawadkhaliq has joined #openstack-ansible | 19:58 | |
| *** fawadk has quit IRC | 20:02 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38692: Lock inactive accounts https://review.openstack.org/233255 | 20:02 |
| openstackgerrit | Kevin Carter proposed openstack/openstack-ansible: Implement neutron venv support https://review.openstack.org/230726 | 20:05 |
| *** cloudtrainme has joined #openstack-ansible | 20:10 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3867{4,6}: X windows https://review.openstack.org/233259 | 20:14 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3867{4,6}: X windows https://review.openstack.org/233259 | 20:16 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps https://review.openstack.org/233261 | 20:21 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38679: Disable DHCP client docs https://review.openstack.org/233262 | 20:24 |
| *** k_stev has joined #openstack-ansible | 20:27 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38684: Max concurrent sessions https://review.openstack.org/233264 | 20:31 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps https://review.openstack.org/233261 | 20:32 |
| *** Mudpuppy has quit IRC | 20:34 | |
| *** ganderson has quit IRC | 20:38 | |
| *** brice_ has quit IRC | 20:42 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38682: Disable bluetooth modules https://review.openstack.org/233270 | 20:43 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38687: VPN connectivity (exception docs) https://review.openstack.org/233273 | 20:45 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3869{2,4}: Lock inactive accounts https://review.openstack.org/233255 | 20:46 |
| * mhayden apologizes for the flood ;) | 20:46 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-386{67,70,96}: Run AIDE via cron https://review.openstack.org/233231 | 20:48 |
| *** wmlynch has quit IRC | 20:55 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-53481: Auditd disk space + single-user mode https://review.openstack.org/233276 | 20:56 |
| bgmccollum | should `nova get-vnc-console test spice-html5` work for spice consoles? | 20:56 |
| *** pradk has quit IRC | 20:58 | |
| mattt | bgmccollum: no? | 21:00 |
| mattt | bgmccollum: you mean `nova get-spice-console` ? | 21:01 |
| *** javeriak has quit IRC | 21:02 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38702: FTP daemon logging https://review.openstack.org/233279 | 21:04 |
| *** sdake_ has joined #openstack-ansible | 21:04 | |
| bgmccollum | mattt: thanks...terrible UX | 21:05 |
| *** sdake has quit IRC | 21:06 | |
| mattt | bgmccollum: i won't argue with that :) | 21:06 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38496: Lock system accounts other than root https://review.openstack.org/232012 | 21:07 |
| mhayden | prometheanfire: what should i use instead of debug? https://review.openstack.org/#/c/232070/ | 21:08 |
| mhayden | or are you talking about using failed_when: ? | 21:08 |
| prometheanfire | mhayden: yes | 21:09 |
| mhayden | wait, those same lines are in another review | 21:09 |
| mhayden | hold on, i may have goofed | 21:09 |
| mhayden | goof confirmed | 21:09 |
| prometheanfire | dun goofed | 21:10 |
| mattt | mhayden: bra slow down | 21:10 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38496: Lock system accounts other than root https://review.openstack.org/232012 | 21:10 |
| mattt | it's not a race | 21:10 |
| prometheanfire | why not? | 21:11 |
| mhayden | mattt: ain't nobody got time for that | 21:11 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root https://review.openstack.org/232070 | 21:12 |
| mhayden | prometheanfire: okay, 38496 and 38500 should be sorted | 21:12 |
| mhayden | somehow 38496's ansible ended up in 38500 | 21:12 |
| prometheanfire | ya, noticed :P | 21:12 |
| mhayden | mattt: 17 controls left | 21:13 |
| mhayden | and they're all the highly annoying ones :| | 21:13 |
| mattt | mhayden: imma be here all night | 21:13 |
| mhayden | mattt: also i've been listening to EDM all day | 21:13 |
| mattt | mhayden: anything good? | 21:14 |
| mhayden | discovered Fon.Leman | 21:14 |
| mhayden | kinda good | 21:14 |
| mhayden | great for headphones with decent bass | 21:14 |
| *** sdake_ has quit IRC | 21:14 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-38458: /etc/group user ownership https://review.openstack.org/233283 | 21:16 |
| mhayden | mattt: there's a doozy ^^ | 21:16 |
| *** KLevenstein has quit IRC | 21:18 | |
| *** sdake has joined #openstack-ansible | 21:19 | |
| mattt | mhayden: i thought we did this one already | 21:19 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-51337: Use an LSM at boot https://review.openstack.org/233284 | 21:20 |
| mhayden | mattt: probably for group ownership | 21:21 |
| *** kukacz has quit IRC | 21:22 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-3851{1,2,3}: IPv4 security controls https://review.openstack.org/232088 | 21:24 |
| mattt | mhayden: why don't you use http://docs.ansible.com/ansible/fail_module.html for https://review.openstack.org/#/c/232070/6/tasks/auth.yml ? | 21:25 |
| mhayden | ah, i forgot about that module | 21:26 |
| mhayden | -1 and comment and i'll fix that up | 21:26 |
| *** phalmos has joined #openstack-ansible | 21:26 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: V-51875: Symlink for docs https://review.openstack.org/233285 | 21:28 |
| mhayden | and that's the last one for me today | 21:28 |
| mhayden | y'all have a good one | 21:28 |
| *** fawadkhaliq has quit IRC | 21:30 | |
| *** fawadkhaliq has joined #openstack-ansible | 21:31 | |
| openstackgerrit | Steve Lewis proposed openstack/openstack-ansible: Use pip install --proxy when $HTTPS_PROXY is set https://review.openstack.org/232916 | 21:32 |
| *** gparaskevas has quit IRC | 21:33 | |
| mattt | mhayden: have a good one | 21:33 |
| *** fawadkhaliq has quit IRC | 21:34 | |
| *** phalmos has quit IRC | 21:39 | |
| *** CheKoLyN has joined #openstack-ansible | 21:46 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:58 | |
| *** alextricity-mobi has quit IRC | 22:10 | |
| *** alextricity-mobi has joined #openstack-ansible | 22:14 | |
| *** alejandrito has quit IRC | 22:34 | |
| *** mfisch has quit IRC | 22:34 | |
| *** spotz is now known as spotz_zzz | 22:35 | |
| *** mfisch has joined #openstack-ansible | 22:35 | |
| *** mfisch is now known as Guest27764 | 22:35 | |
| *** Guest27764 is now known as mfisch | 22:37 | |
| *** mfisch has joined #openstack-ansible | 22:37 | |
| *** k_stev has quit IRC | 22:37 | |
| *** elo has quit IRC | 22:38 | |
| *** elo has joined #openstack-ansible | 22:38 | |
| *** daneyon_ has quit IRC | 22:40 | |
| *** alop has quit IRC | 22:46 | |
| *** miguelgrinberg has quit IRC | 22:53 | |
| *** miguelgrinberg has joined #openstack-ansible | 22:53 | |
| *** markvoelker_ has joined #openstack-ansible | 23:10 | |
| *** elo is now known as help | 23:11 | |
| *** help is now known as Guest78155 | 23:11 | |
| *** CheKoLyN has quit IRC | 23:16 | |
| *** Guest78155 has quit IRC | 23:22 | |
| *** elo has joined #openstack-ansible | 23:23 | |
| *** sdake has quit IRC | 23:26 | |
| *** leakypipes has quit IRC | 23:49 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!