Thursday, 2015-10-15

*** Ti-mo- has quit IRC00:00
*** phschwartz has quit IRC00:01
*** phschwartz has joined #openstack-ansible00:01
*** Ti-mo has joined #openstack-ansible00:02
cloudnullo/ thingee i think odyssey4me may be off for the evening .00:08
cloudnullsomething i can help with ?00:08
*** BjoernT has quit IRC00:11
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement aodh venv support  https://review.openstack.org/23340100:11
openstackgerritKevin Carter proposed openstack/openstack-ansible: Fix to correctly set the cinder_storage_address  https://review.openstack.org/23263700:16
cloudnulld34dh0r53: odyssey4me was correct, the aodh bits are part of the dependent patch .00:19
prometheanfirecloudnull: you need a better picture http://mitakadesignsummit.sched.org/kevin.carter00:21
cloudnullnah thats my 8-bit nature :)00:22
prometheanfire:P00:24
openstackgerritKevin Carter proposed openstack/openstack-ansible: Correct OS_IDENTITY_API_VERSION   https://review.openstack.org/23500800:28
openstackgerritKevin Carter proposed openstack/openstack-ansible: Enable Horizon multidomain configuration  https://review.openstack.org/22983600:29
prometheanfirecloudnull: the problem with nova in a container was namespace support for iscsi right? or was that cinder?00:38
cloudnullyea its that AF_NETLINK is not namespace aware00:38
cloudnullso no iscsi initiation00:38
prometheanfirecool00:39
prometheanfirefinally planning the ops thing00:39
prometheanfirehttps://etherpad.openstack.org/p/TYO-ops-infrastructure-containers00:39
prometheanfireI think what I have now fills the time00:40
cooljprometheanfire: abiword is not in your path though00:41
prometheanfireuh, what?00:41
cooljthe etherpads are being silly https://etherpad.openstack.org/p/TYO-ops-monitoring00:42
prometheanfirelol00:42
prometheanfirethat's shown up before00:42
*** yl has joined #openstack-ansible00:57
yli am setting up an openstack lab with approximately 10 nodes with HA, how can i do that with osad?00:58
openstackgerritMiguel Grinberg proposed openstack/openstack-ansible: Add horizon setting for cinder backup  https://review.openstack.org/23504200:58
ylwhere can i find more info/install guide for a multi-node HA installation00:59
cloudnullyi have you seen http://docs.openstack.org/developer/openstack-ansible/install-guide/index.html#installation01:00
ylat http://docs.openstack.org/developer/openstack-ansible/install-guide/overview-hostlayout.html, it mentioned "At least one hardware load balancer must be included to manage the traffic among the target hosts."?01:04
cloudnullyi you will need an lb01:04
ylcan i install without hardware load balancer?01:04
cloudnullhowever you can use haproxy which can exist on 2 of your infra nodes which will setup failover between the two01:04
cloudnullour haproxy role will take care of that for you01:04
prometheanfirecloudnull: you know if kolla has a channel? they added stuff they wanted to talk about but don't know where they are?01:07
cloudnull#kolla01:07
*** tlian has quit IRC01:07
cloudnullyi http://docs.openstack.org/developer/openstack-ansible/install-guide/configure-haproxy.html?highlight=haproxy01:07
*** woodard has joined #openstack-ansible01:10
ylcan i configure self-sign certificate for internal communication, but using public certificate for Horizon and API?01:13
*** tlian has joined #openstack-ansible01:14
cloudnullyes assuming you use haproxy >= 1.5 and terminate at the LB.01:15
cloudnullnot all of the services support SSL all the way down and some of the ones that do dont support it well.01:15
cloudnullrabbitmq is setup to use a selfsigned cert already01:16
ylis there a role for "monitoring"? how can i build monitor "openstack-services" and trigger alerts?01:16
cloudnullyou'd need to configure ssl support for mariadb as well. which may or may not work very well when using self signed certs01:16
cloudnullwe dont have a baked in monitoring solution .01:17
ylwhat would you suggest for the monitoring part?01:17
cloudnullif you dont mind using shared resources https://github.com/rcbops/rpc-openstack has monitoring using rackspace cloud monitoring01:17
cloudnullsensu also has some plugins that may work for you01:18
cloudnullhttps://github.com/sensu-plugins/sensu-plugins-openstack01:18
cloudnullalso if youre looking for simple host monitoring newrelic works well enough01:18
cloudnullwhich there is also a role that will do the newrelic setup here https://github.com/michaelrigart/ansible-role-newrelic01:20
yli assume that, with OSAD, i can install core component(nova,neutron,etc). And then later stage to add swift and cinder?01:22
cloudnullyes01:22
cloudnullyi checkout https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example for more examples on how to consume the base config01:23
cloudnulla complete example can be seen here https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio01:23
*** woodard has quit IRC01:23
*** kerwin_bai has joined #openstack-ansible01:23
cloudnullexample for swift when youre ready to deploy swift simply add in the swift config https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/conf.d/swift.yml.aio01:24
cloudnullin the case of cinder you'd simply ommit the storage infra / storage hosts sections https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio#L108-L11701:25
cloudnulladd it in when ready01:25
yli am looking at the user_config file, i assume "container" network is the same as "management" network?01:26
ylwhat about the public/external network for VM floating ip01:27
yl?01:27
cloudnullyes container network can be the same as management01:31
cloudnullas for public / external you'd be setting https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio#L30-L5701:32
cloudnullbased on your network needs / configuration01:32
cloudnullw/ flat being less common than the vxlan / vlan01:32
cloudnullin most cases removing that config section would work assuming you created br-vlan and br-vxlan on your hosts.01:33
cloudnulland i'd likely cut out https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.aio#L40-L4801:34
cloudnullbecause most dont use flat networks however we configure it for the AIO so people can play with it01:34
ylgreat thanks!01:35
cloudnullif you have a VM w/ 8G ram and ~50GB storage you can kick the tires by deploying our AIO01:35
cloudnullhttp://docs.openstack.org/developer/openstack-ansible/developer-docs/quickstart-aio.html#running-a-customized-aio-build01:36
cloudnullthat'll give you a complete stack01:36
cloudnullthat way you can see how it all works01:37
cloudnullim signing off . i dont feel well (finally getting sick) but have fun yi and let us know if we can help make it all go.01:38
cloudnullas a note, most of the core folks work01:39
cloudnullUTC+101:39
cloudnullor UTC-501:39
cloudnullhowever there's generally someone around.01:40
mhaydenaaah, merge conflicts galore on my patches :P01:52
stevelleyou're welcome? :)01:52
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updated the repo-build process  https://review.openstack.org/23071601:52
mhaydenstevelle: it's a problem i can fix!01:52
mhaydenunlike what's happening to the astros right now01:52
cloudnullhaha welcome to the game mhayden :)01:53
openstackgerritSteve Lewis proposed openstack/openstack-ansible: WIP Update Horizon configuration for Liberty  https://review.openstack.org/23505201:56
mhaydenreview.openstack.org has AAAA records, nice01:56
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207401:59
mhaydenpushing to gerrit seems to be slow from my neck of the woods01:59
mhaydenweb interface is quick though01:59
mhaydenrebased: https://review.openstack.org/23207401:59
openstackgerritMerged openstack/openstack-ansible-security: Removing 'indices/tables' from index.rst  https://review.openstack.org/23305802:00
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updated hostlayout to fix some wording  https://review.openstack.org/23505302:01
stevelleI'll see if I can give you one more conflict here tonight mhayden :)02:01
cloudnullyi ^ that corrects the hostlayout doc note that you have to have a physical lb02:02
* mhayden hugs stevelle02:02
cloudnulland on that note, im out02:02
mhaydennight, cloudnull02:02
*** yl has quit IRC02:03
openstackgerritMerged openstack/openstack-ansible-security: V-38498: Audit log file permissions  https://review.openstack.org/23205602:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments  https://review.openstack.org/23312002:05
*** yunpengli has joined #openstack-ansible02:09
*** yunpengli has quit IRC02:09
openstackgerritKevin Carter proposed openstack/openstack-ansible: Updated hostlayout to fix some wording  https://review.openstack.org/23505302:15
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3865{6,7}: Samba  https://review.openstack.org/23321502:17
*** sdake has joined #openstack-ansible02:17
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps  https://review.openstack.org/23326102:18
prometheanfirecloudnull: nn02:20
prometheanfireweakling02:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38682: Disable bluetooth modules  https://review.openstack.org/23327002:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-51391: Initialize AIDE  https://review.openstack.org/23426402:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38623: rsyslog file permissions  https://review.openstack.org/23433102:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38546: Disable IPv6 system-wide  https://review.openstack.org/23433302:30
openstackgerritMerged openstack/openstack-ansible: Enable Horizon multidomain configuration  https://review.openstack.org/22983602:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Don't require latest pacakge version  https://review.openstack.org/23485602:33
mhaydenstevelle: ^^ expanded the scope per your suggestion02:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Don't require latest pacakge version  https://review.openstack.org/23485602:33
mhaydenoh, and i can't spell package02:37
mhaydenperhaps i can't see the screen due to the tears from the astros :|02:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Don't require latest package version  https://review.openstack.org/23485602:38
*** [ivan][ivan]_ has joined #openstack-ansible02:40
[ivan][ivan]_Hi all, anybody have guide about Openstack + Ansible deployment on multi cluster spine leaf networks?02:41
*** g3rms_ has joined #openstack-ansible02:57
*** cloudtrainme has quit IRC03:02
*** sdake has quit IRC03:07
openstackgerritMerged openstack/openstack-ansible: Only wait for SSH if the container config has changed  https://review.openstack.org/23489003:16
openstackgerritMerged openstack/openstack-ansible: Update rabbitmq-server to v3.5.6-1  https://review.openstack.org/23370003:23
openstackgerritMerged openstack/openstack-ansible: Set cinder_service_region to service_region by default  https://review.openstack.org/23133903:23
*** darrenc is now known as darrenc_afk03:24
openstackgerritMerged openstack/openstack-ansible: Implement horizon venv support  https://review.openstack.org/22922603:44
openstackgerritMerged openstack/openstack-ansible: Fix to correctly set the nova_management_address  https://review.openstack.org/23266604:00
*** WeeIX has joined #openstack-ansible04:00
*** tlian has quit IRC04:06
*** g3rms_ has quit IRC04:08
*** kerwin_bai1 has joined #openstack-ansible04:15
*** WeeIX has quit IRC04:15
*** kerwin_bai has quit IRC04:16
*** kerwin_bai1 is now known as kerwin_bai04:17
*** darrenc_afk is now known as darrenc04:24
*** kerwin_bai1 has joined #openstack-ansible04:29
*** kerwin_bai has quit IRC04:29
*** kerwin_bai1 is now known as kerwin_bai04:29
*** kerwin_bai has quit IRC04:33
*** javeriak has joined #openstack-ansible04:55
*** kerwin_bai has joined #openstack-ansible04:56
*** javeriak_ has joined #openstack-ansible04:59
*** javeriak has quit IRC05:00
*** javeriak_ has quit IRC05:13
*** javeriak has joined #openstack-ansible05:21
*** Mudpuppy has quit IRC05:26
*** shausy has joined #openstack-ansible05:49
*** shausy has quit IRC05:52
*** shausy has joined #openstack-ansible05:52
*** kerwin_bai has quit IRC05:57
openstackgerritMerged openstack/openstack-ansible-security: Replace debug with fail  https://review.openstack.org/23494205:58
*** javeriak has quit IRC06:02
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Set cinder_service_region to service_region by default  https://review.openstack.org/23510106:03
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Enable Horizon multidomain configuration  https://review.openstack.org/23510206:03
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update rabbitmq-server to v3.5.6-1  https://review.openstack.org/23510406:05
*** manas has joined #openstack-ansible06:19
*** javeriak has joined #openstack-ansible06:26
*** javeriak has quit IRC06:32
*** manas has quit IRC06:51
*** javeriak has joined #openstack-ansible06:59
*** javeriak_ has joined #openstack-ansible06:59
*** javeriak has quit IRC06:59
*** javeriak_ has quit IRC07:04
*** javeriak has joined #openstack-ansible07:04
*** javeriak has quit IRC07:08
*** pellaeon has joined #openstack-ansible07:12
*** javeriak has joined #openstack-ansible07:23
*** Mudpuppy has joined #openstack-ansible07:27
*** Mudpuppy has quit IRC07:31
*** javeriak has quit IRC07:33
*** javeriak has joined #openstack-ansible07:35
*** gparaskevas has joined #openstack-ansible07:41
*** javeriak has quit IRC07:42
*** neilus has joined #openstack-ansible07:50
*** subscope has joined #openstack-ansible08:59
*** [ivan][ivan]_ has quit IRC09:10
openstackgerritMerged openstack/openstack-ansible-security: Don't require latest package version  https://review.openstack.org/23485609:12
openstackgerritMerged openstack/openstack-ansible-security: V-38702: FTP daemon logging  https://review.openstack.org/23327909:18
*** kerwin_bai has joined #openstack-ansible09:22
openstackgerritMatt Thompson proposed openstack/openstack-ansible-security: V-3867{4,6}: X windows  https://review.openstack.org/23325909:27
*** manas has joined #openstack-ansible09:30
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Update Nova Configuration for Liberty  https://review.openstack.org/22783909:39
openstackgerritMerged openstack/openstack-ansible-security: V-38500: No UID 0 accounts except root  https://review.openstack.org/23207009:40
openstackgerritMerged openstack/openstack-ansible-security: V-3851{1,2,3}, V-38686: IPv4 security controls  https://review.openstack.org/23208809:42
openstackgerritMerged openstack/openstack-ansible-security: V-38687: VPN connectivity (exception docs)  https://review.openstack.org/23327309:42
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Implement nova venv support  https://review.openstack.org/23072709:44
openstackgerritJesse Pretorius proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207409:45
*** manas has quit IRC09:59
*** robak has left #openstack-ansible10:00
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Add horizon setting for cinder backup  https://review.openstack.org/23504210:02
odyssey4memattt I thought that your suggestion in https://review.openstack.org/235042 was good, so I quickly adapted it - if you're happy then go ahead and vote on it, I'll verify with miguelgrinberg that he's happy when he comes online later.10:04
*** manas has joined #openstack-ansible10:04
tiagogomes_isn't a bit confusing about having the management network and storage network defined under provider_networks? But they could go to another section10:06
matttodyssey4me: cool will do10:06
odyssey4metiagogomes_ networking in general is confusing ;)10:07
tiagogomes_haha it is10:07
* tiagogomes_ is glad that he doesn't need to deal with Open vSwitch10:07
*** manas has quit IRC10:07
odyssey4meI've seen some feedback that the use of 'provider networks' in our context is not quite right - and suggestions to change that to a more standard term.10:08
odyssey4meUnfortunately I'm not a guy who understand enough about networking to do any of that, so we rely on those who do to rescue us. :p10:08
tiagogomes_maybe rename provider_networks to networks; and consider every network by default to be what today you call "raw", unless with has a `provider_network: true` field10:10
odyssey4metiagogomes_ I'd love to say that makes sense, but I honestly can't have a meaningful conversation about networking in general or in the project's context. :/10:12
odyssey4meIt may make sense to either submit a review and let the discussion happen there, or to discuss it with cloudnull and/or evrardjp who seem to know a few things. :)10:12
*** subscope has quit IRC10:16
*** gparaskevas has quit IRC10:19
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Seperated out Telemetry Alarming (Aodh)  https://review.openstack.org/23222410:21
*** gcivitella has joined #openstack-ansible10:28
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Implement ceilometer venv support  https://review.openstack.org/22921210:41
*** subscope has joined #openstack-ansible10:56
openstackgerritMerged openstack/openstack-ansible: Implement heat venv support  https://review.openstack.org/22922511:25
*** jhesketh has quit IRC11:31
*** jhesketh has joined #openstack-ansible11:32
*** gparaskevas has joined #openstack-ansible11:33
*** Qwazerty has quit IRC11:53
*** kerwin_bai has quit IRC11:53
*** k_stev has joined #openstack-ansible11:55
*** markvoelker has joined #openstack-ansible12:08
*** _hanhart has joined #openstack-ansible12:09
*** javeriak has joined #openstack-ansible12:12
*** javeriak_ has joined #openstack-ansible12:19
mhaydendang, mattt -- you are the wind beneath my wings, sir12:20
*** javeriak has quit IRC12:20
*** _hanhart has quit IRC12:21
*** javeriak_ has quit IRC12:22
*** javeriak has joined #openstack-ansible12:22
*** Mudpuppy has joined #openstack-ansible12:24
*** javeriak_ has joined #openstack-ansible12:26
*** javeriak has quit IRC12:28
*** Mudpuppy has quit IRC12:29
*** phschwartz has quit IRC12:29
*** phschwartz has joined #openstack-ansible12:29
*** kerwin_bai has joined #openstack-ansible12:30
openstackgerritMerged openstack/openstack-ansible-security: V-38697: Sticky bit (exception)  https://review.openstack.org/23424912:31
openstackgerritMerged openstack/openstack-ansible-security: V-38679: Disable DHCP client docs  https://review.openstack.org/23326212:31
openstackgerritMerged openstack/openstack-ansible-security: V-38655: Mount w/noexec exception [docs only]  https://review.openstack.org/23314712:32
*** _hanhart has joined #openstack-ansible12:34
openstackgerritMerged openstack/openstack-ansible-security: V-386{67,70,95,96,98}, V-38700: Run AIDE via cron  https://review.openstack.org/23323112:34
openstackgerritMerged openstack/openstack-ansible-security: V-38682: Disable bluetooth modules  https://review.openstack.org/23327012:34
*** woodard has joined #openstack-ansible12:37
*** woodard has quit IRC12:37
*** woodard has joined #openstack-ansible12:38
odyssey4memattt after the rebase and resolution of the merge conflict, can you add your vote back to https://review.openstack.org/227839 please12:39
*** phschwartz has quit IRC12:41
matttodyssey4me: sure12:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments  https://review.openstack.org/23312012:41
*** phschwartz has joined #openstack-ansible12:42
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38623: rsyslog file permissions  https://review.openstack.org/23433112:43
openstackgerritMerged openstack/openstack-ansible: Implement ceilometer venv support  https://review.openstack.org/22921212:44
openstackgerritMerged openstack/openstack-ansible: Updated hostlayout to fix some wording  https://review.openstack.org/23505312:44
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3865{6,7}: Samba  https://review.openstack.org/23321512:45
odyssey4megit-harry fyi I mentioned this earlier: https://review.openstack.org/232811 and https://github.com/sigmavirus24/schema-validator12:45
*** phschwartz has quit IRC12:45
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38660: SNMPv3  https://review.openstack.org/23322612:46
*** _hanhart has quit IRC12:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps  https://review.openstack.org/23326112:47
*** phschwartz has joined #openstack-ansible12:49
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38546: Disable IPv6 system-wide  https://review.openstack.org/23433312:50
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38684: Max concurrent sessions  https://review.openstack.org/23326412:51
matttdrawing a blank, can i vote on a commit i've had to manually rebase?12:52
mattt(someone else's commit btw)12:52
mhaydenmattt: you can do anything if you believe12:53
* mhayden learned that from a cat poster12:53
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-51391: Initialize AIDE  https://review.openstack.org/23426412:53
matttmhayden: i believe12:53
matttmhayden: IN YOU12:53
* git-harry scratches left elbow with left hand12:54
mhaydenmattt: http://www.reactiongifs.us/wp-content/uploads/2013/06/raining_david_tennant.gif12:54
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3867{4,6}: X windows  https://review.openstack.org/23325912:54
mhaydenmattt: alrighty, i think i fixed up he stuff you found12:54
mhayden(for now) ;)12:54
matttmhayden: you awesome12:55
odyssey4memattt yes, a rebase is not a substantive change12:58
*** phschwartz has quit IRC12:58
*** phschwartz has joined #openstack-ansible12:58
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents  https://review.openstack.org/23276713:01
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents  https://review.openstack.org/23276713:03
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents  https://review.openstack.org/23276713:03
mhaydenthird time's the charm on that one :|13:03
mhaydenmattt: ^^ fixed the state: latest13:03
*** cloudtrainme has joined #openstack-ansible13:06
matttmhayden: why do you do a changed_when in https://review.openstack.org/#/c/232767/11/tasks/auditd.yml ?13:06
* mhayden ganders13:06
mhaydenah, i'm switching those to "False"13:06
mhaydeni'll fix13:06
matttmhayden: i'm not saying do/don't, i'm more curious13:07
matttincase i'm doing something wrong13:07
matttwhich is more often than not the case13:07
mhaydenwell i want the play to say changed=0 when it finishes13:07
mhaydenand some of these shell commands return changed=113:07
mhaydenwhen all they're doing is reading data13:07
matttah yeah then false is better13:07
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38637, V-3866{3,4,5}: Verify auditd pkg contents  https://review.openstack.org/23276713:08
openstackgerritMerged openstack/openstack-ansible-security: V-38546: Disable IPv6 system-wide  https://review.openstack.org/23433313:08
mhaydenmattt: ^^ so let it be written, so let it be reviewed :P13:08
*** javeriak has joined #openstack-ansible13:08
*** cloudtrainme has quit IRC13:10
*** javeriak_ has quit IRC13:11
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments  https://review.openstack.org/23312013:14
mhayden^^ rebased13:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps  https://review.openstack.org/23326113:15
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-51391: Initialize AIDE  https://review.openstack.org/23426413:16
*** tlian has joined #openstack-ansible13:17
*** woodard has quit IRC13:19
mhaydenmattt: here's one that might be fairly easy to review -> https://review.openstack.org/#/c/234439/13:19
mhaydenmainly just cracking up the docs into pieces for easier import/sorting13:19
matttmhayden: easy if you ignore the fact that there's 1000 new files13:22
mhaydenmattt: of course!13:23
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement aodh venv support  https://review.openstack.org/23340113:23
mhaydenmorning cloudnull13:23
cloudnullo/13:24
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement swift venv support  https://review.openstack.org/23073313:25
*** woodard has joined #openstack-ansible13:26
cloudnullmatt updated those two PRs for consistency . i forgot to remove the venv_bin ownership call for swift13:26
cloudnulland added the dir create for aodh13:26
cloudnullalso replied to the other questions in the review.13:26
cloudnullon that note, im out. i feel terrible.13:27
matttcloudnull: thanks kevin, get some rest13:27
cloudnullthanks mattt for reviewing all that13:27
cloudnulland i intend to sleep now :)13:27
andymccri like it cloudnull, acclimating to tokyo early :D13:28
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207413:30
*** daneyon_ has quit IRC13:37
*** richoid has quit IRC13:40
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207413:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-51391: Initialize AIDE  https://review.openstack.org/23426413:45
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38660: SNMPv3  https://review.openstack.org/23322613:47
*** jwagner_away is now known as jwagner13:49
matttmhayden: https://review.openstack.org/#/c/234264/8/handlers/main.yml13:55
matttmhayden: was more curious if you could have multiple aideinit processes running at same time13:55
matttas that in itself could be problematic13:55
mhaydeni'll test that this morning13:56
mhaydenIIRC, there's a lockfile13:56
mhaydenthen again, ubuntu has three levels of wrappers for running AIDE :(13:56
*** jmckind has joined #openstack-ansible13:58
*** sigmavirus24_awa is now known as sigmavirus2413:58
*** phalmos has joined #openstack-ansible14:00
*** cloudtrainme has joined #openstack-ansible14:12
*** cloudtrainme has quit IRC14:12
openstackgerritMerged openstack/openstack-ansible-security: V-38684: Max concurrent sessions  https://review.openstack.org/23326414:16
odyssey4memattt has your concern been addressed in https://review.openstack.org/230726 ?14:17
*** tlian has quit IRC14:19
matttodyssey4me: you tell me?14:19
*** tlian has joined #openstack-ansible14:20
*** jwagner is now known as jwagner_away14:20
*** Mudpuppy has joined #openstack-ansible14:21
openstackgerritMerged openstack/openstack-ansible: Update Nova Configuration for Liberty  https://review.openstack.org/22783914:22
*** phalmos has quit IRC14:23
*** jwagner_away is now known as jwagner14:25
*** mgoddard__ has joined #openstack-ansible14:29
*** mgoddard_ has quit IRC14:33
openstackgerritMerged openstack/openstack-ansible-security: V-3867{4,6}: X windows  https://review.openstack.org/23325914:33
openstackgerritMerged openstack/openstack-ansible-security: V-38623: rsyslog file permissions  https://review.openstack.org/23433114:33
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Adding missing vfat packages for the nova config_drive  https://review.openstack.org/23539314:38
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38675: Restrict core dumps  https://review.openstack.org/23326114:39
mhaydenodyssey4me / mattt: just a rebase here ^^14:40
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments  https://review.openstack.org/23312014:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3865{6,7}: Samba  https://review.openstack.org/23321514:42
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38660: SNMPv3  https://review.openstack.org/23322614:43
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3869{2,4}: Lock inactive accounts  https://review.openstack.org/23325514:44
*** Guest68187 has quit IRC14:44
*** lbragstad has quit IRC14:44
*** blewis has joined #openstack-ansible14:45
*** blewis is now known as Guest7254914:45
*** lbragstad has joined #openstack-ansible14:46
*** Mudpuppy has quit IRC14:46
*** Mudpuppy has joined #openstack-ansible14:47
*** Guest72549 has quit IRC14:48
*** lbragstad has quit IRC14:48
*** mgoddard__ has quit IRC14:51
*** mgoddard has joined #openstack-ansible14:51
*** lbragstad has joined #openstack-ansible14:53
*** lbragstad has quit IRC14:54
*** lbragstad has joined #openstack-ansible14:56
*** javeriak has quit IRC14:56
*** javeriak has joined #openstack-ansible14:58
*** javeriak has quit IRC15:06
*** woodard has quit IRC15:08
tiagogomes_Mmm, my containers don't have external connectivity: http://paste.openstack.org/show/476387/15:14
tiagogomes_Anyone has any clue why?15:14
openstackgerritMerged openstack/openstack-ansible-security: V-38675: Restrict core dumps  https://review.openstack.org/23326115:18
*** phalmos has joined #openstack-ansible15:19
*** mgariepy has quit IRC15:24
tiagogomes_I think I know what the problem is, I set `lxc_net_address: 192.168.1.0`15:25
*** galstrom_zzz is now known as galstrom15:27
*** mgariepy has joined #openstack-ansible15:27
*** sdake has joined #openstack-ansible15:27
*** openstackgerrit has quit IRC15:31
*** openstackgerrit has joined #openstack-ansible15:32
*** daneyon has joined #openstack-ansible15:33
*** woodard has joined #openstack-ansible15:34
jasondotstarstevelle: pig15:37
jasondotstar*PING15:37
jasondotstarlol15:37
stevelleoink?15:37
jasondotstarstevelle: can you (or anyone) take a look at https://review.openstack.org/#/c/235425/15:37
jasondotstardidn't see it announced15:38
stevellewill at it to my queue15:38
jasondotstarstevelle: ack. thx.15:38
*** mgoddard_ has joined #openstack-ansible15:45
*** blewis has joined #openstack-ansible15:46
*** blewis is now known as Guest2779915:46
*** mgoddard has quit IRC15:48
*** sdake has quit IRC15:48
*** jmckind is now known as jmckind_15:52
*** jmckind_ is now known as jmckind15:52
*** woodard_ has joined #openstack-ansible15:53
*** woodard_ has quit IRC15:53
*** woodard_ has joined #openstack-ansible15:53
*** woodard has quit IRC15:55
*** gparaskevas has quit IRC15:55
*** mgoddard_ has quit IRC15:58
*** mgoddard has joined #openstack-ansible15:58
Sam-I-Ammeeting?16:00
odyssey4mecommunity meeting in #openstack-meeting-4 cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, mancdaz, dolphm, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle16:01
*** Bjoern_ has joined #openstack-ansible16:02
*** harvy has quit IRC16:12
*** g3rms_ has joined #openstack-ansible16:19
*** alop has joined #openstack-ansible16:20
*** woodard_ has quit IRC16:22
*** g3rms_ has quit IRC16:26
*** woodard has joined #openstack-ansible16:27
*** woodard has quit IRC16:28
*** woodard has joined #openstack-ansible16:28
*** jmckind is now known as jmckind_16:33
*** sdake has joined #openstack-ansible16:35
*** shausy has quit IRC16:40
*** kerwin_bai has quit IRC16:42
*** javeriak has joined #openstack-ansible16:45
*** tiagogomes_ has quit IRC16:48
*** subscope has quit IRC16:55
*** javeriak has quit IRC16:56
*** javeriak has joined #openstack-ansible17:00
*** phalmos has quit IRC17:04
*** gcivitella has quit IRC17:05
*** phalmos has joined #openstack-ansible17:05
*** spotz_zzz is now known as spotz17:08
*** lbragstad_ has joined #openstack-ansible17:11
*** bitblt has joined #openstack-ansible17:13
*** phschwartz is now known as phschwartz_aw17:17
*** woodard_ has joined #openstack-ansible17:25
*** shausy has joined #openstack-ansible17:25
*** woodard has quit IRC17:28
*** brice has joined #openstack-ansible17:36
openstackgerritByron McCollum proposed openstack/openstack-ansible: Neutron Post Install Uses Deprecated Keystone Client, Sets Needless Fact  https://review.openstack.org/23550517:38
*** javeriak_ has joined #openstack-ansible17:44
*** javeriak has quit IRC17:45
thingeeodyssey4me: ping17:49
odyssey4me:) hi thingee - I'm busy slotting the topics together. Thanks for reaching out.17:49
odyssey4mewe just finished our meeting in which we decided what the topics would be17:50
thingeeodyssey4me: excellent, thank you!17:51
*** shausy has quit IRC17:53
*** spotz is now known as spotz_zzz17:55
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement neutron venv support  https://review.openstack.org/23072617:55
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement swift venv support  https://review.openstack.org/23073317:56
*** thingee has left #openstack-ansible17:59
*** lbragstad has quit IRC18:00
*** Guest27799 has quit IRC18:00
*** lbragstad_ is now known as lbragstad18:00
bgmccollumshould all git tasks have force: yes set? im running into an issue where RPC OpenStack is modifying some spice files, and re-running the playbooks breaks the spice repo clone because local modifications exist.18:09
bgmccollumor should the clone land somewhere else, and then moved to final destination where its safe to modify files18:11
*** alejandrito has joined #openstack-ansible18:14
*** bitblt has quit IRC18:16
odyssey4mebgmccollum it sounds like rpc-openstack needs a patch to cater for the change in the openstack-ansible deliverable18:21
odyssey4meit probably just needs an adjusted file for the patch, if it needs the patch at all18:21
bgmccollumodyssey4me: but do you think seetting force to yes is a bad thing?18:22
odyssey4mebgmccollum I dunno, that depends on how the patch is being applied - it probably is bad because if it's failing then it's doing so for a reason18:23
odyssey4mepalendae fyi http://lists.openstack.org/pipermail/openstack-dev/2015-October/077155.html18:23
odyssey4mein the etherpad is a link to a topic specific etherpad18:23
odyssey4mego wild there with whatever you'd like, and feel free to send out a follow up email to the ML when you have put some meat into it18:24
palendaeodyssey4me: Thanks18:24
bgmccollumodyssey4me: unfortunately...the spice console is cloned directly to its final destination...any patching after that will leave the workspace unclean...so the next time the playbooks run, it will fail because local modifications exist. there currently is no way to make it work, unless OSA takes on the patch.18:25
*** jmckind_ is now known as jmckind18:27
openstackgerritByron McCollum proposed openstack/openstack-ansible: Ensure git clones discard local modifications  https://review.openstack.org/23553718:29
openstackgerritByron McCollum proposed openstack/openstack-ansible: Ensure git clones discard local modifications  https://review.openstack.org/23553718:32
lbragstadcloudnull i meant to follow up on this a while ago, but did you end up hitting any issues with constraints support in yaprt?18:36
lbragstadcloudnull with this pr - https://github.com/cloudnull/yaprt/pull/11 ?18:37
*** Mudpuppy_ has joined #openstack-ansible18:49
*** Mudpuppy has quit IRC18:50
*** subscope has joined #openstack-ansible18:56
*** javeriak_ has quit IRC19:05
*** mgoddard_ has joined #openstack-ansible19:16
*** mgoddard__ has joined #openstack-ansible19:17
*** mgoddard has quit IRC19:19
*** mgoddard_ has quit IRC19:20
*** phschwartz_aw is now known as phschwartz19:23
*** mgoddard_ has joined #openstack-ansible19:24
*** mgoddard__ has quit IRC19:25
*** mgoddard__ has joined #openstack-ansible19:25
*** jmckind is now known as jmckind_19:25
*** jmckind_ is now known as jmckind19:26
*** mgoddard_ has quit IRC19:29
*** jmckind is now known as jmckind_19:36
mhaydenodyssey4me: sorry for disappearing -- crazy meeting day19:39
mhaydenwill check in with Apsu on the dangling veth fun, odyssey4me19:39
*** woodard has joined #openstack-ansible19:40
*** woodard_ has quit IRC19:43
*** mgoddard_ has joined #openstack-ansible19:43
*** mgoddard__ has quit IRC19:44
*** mgoddard has joined #openstack-ansible19:45
*** woodard has quit IRC19:46
*** woodard has joined #openstack-ansible19:47
*** mgoddard_ has quit IRC19:48
*** woodard_ has joined #openstack-ansible19:51
openstackgerritMerged openstack/openstack-ansible: Neutron Post Install Uses Deprecated Keystone Client, Sets Needless Fact  https://review.openstack.org/23550519:51
*** mgoddard_ has joined #openstack-ansible19:53
*** mgoddard has quit IRC19:54
*** woodard has quit IRC19:54
*** mgoddard__ has joined #openstack-ansible19:54
openstackgerritByron McCollum proposed openstack/openstack-ansible: Neutron Post Install Uses Deprecated Keystone Client, Sets Needless Fact  https://review.openstack.org/23556519:55
*** mgoddard_ has quit IRC19:56
*** mgoddard_ has joined #openstack-ansible19:56
*** mgoddard__ has quit IRC19:57
*** mgoddard__ has joined #openstack-ansible19:57
*** mgoddard_ has quit IRC20:01
*** Mudpuppy_ has quit IRC20:05
*** Mudpuppy has joined #openstack-ansible20:06
*** brice has quit IRC20:07
Apsumhayden: DANGLErs20:10
Sam-I-AmApsu: is that still a thing?20:11
*** ashishjain has joined #openstack-ansible20:11
ApsuSam-I-Am: Of course it is. Netlink is still slow20:13
palendaeThe naming the pair took care of it, but we're waiting on lxc to release a version with the fix, and seeing if that gets backported20:14
Sam-I-Amwas it an actual lxc problem or more kernel weirdnes?20:16
palendaelxc doesn't clean up after itself20:16
Sam-I-Amnot sure ubuntu would backport something like that into 14.0420:18
palendaeProbably20:19
palendae16.04 is up next20:20
Sam-I-Amyep20:20
*** subscope has quit IRC20:25
openstackgerritMichael Davies proposed openstack/openstack-ansible-specs: Add spec for Ironic support  https://review.openstack.org/23349320:32
*** woodard_ has quit IRC20:33
*** woodard has joined #openstack-ansible20:35
openstackgerritMerged openstack/openstack-ansible-security: V-53481: Auditd disk space + single-user mode  https://review.openstack.org/23327620:38
openstackgerritMerged openstack/openstack-ansible-security: V-51875: Symlink for docs  https://review.openstack.org/23328520:40
ashishjainCan I get some help on openstack issue as I am using osad to install it ?20:41
openstackgerritMerged openstack/openstack-ansible-security: V-51739: LSM device labeling exception  https://review.openstack.org/23422720:41
*** woodard has quit IRC20:41
ashishjainI am not able to spin off a VM because of the error message "Unexpected vif_type=binding_failed"20:41
openstackgerritMerged openstack/openstack-ansible-security: V-386{85,90}: Temporary/emergency accounts (exception)  https://review.openstack.org/23423720:42
ashishjainI also see the following in neutron-linuxbridge-agent.log in compute node is -> http://paste.openstack.org/show/476429/20:42
ashishjainI also see a fix which was merged in osad via the following bug https://bugs.launchpad.net/neutron/+bug/143287320:43
openstackLaunchpad bug 1432873 in openstack-ansible juno "Add FDB bridge entry fails if old entry not removed" [Undecided,Fix released] - Assigned to Kevin Carter (kevin-carter)20:43
ashishjainNot sure if my issue is related to this but I see difference in entries when I run the bridge fd command on neutron agent node and compute node20:44
ashishjainsome entries do match but some differ too20:45
ashishjainsome details about my network creation and the command I use to boot a nova instance -> http://paste.openstack.org/show/476432/20:47
ashishjainLooks like this could be an issue with "Neutron-Linux-Bridge-Plugin" as the return code is 255 for any command20:53
ashishjainanyone with expertise on neutron linux bridge plugin20:54
*** jwagner is now known as jwagner_away21:04
*** ashishjain has quit IRC21:15
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38681: GID's in /etc/passwd & /etc/group  https://review.openstack.org/23421521:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-51391: Initialize AIDE  https://review.openstack.org/23426421:20
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38680: Audit log capacity notifications  https://review.openstack.org/23324721:22
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38501, V-38573: Disable accounts after failed logins  https://review.openstack.org/23207421:23
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3864{2,5,7,9}, V-38651: Umask adjustments  https://review.openstack.org/23312021:24
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-3865{6,7}: Samba  https://review.openstack.org/23321521:27
openstackgerritKevin Carter proposed openstack/openstack-ansible: Implement nova venv support  https://review.openstack.org/23072721:29
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: V-38660: SNMPv3  https://review.openstack.org/23322621:31
*** woodard has joined #openstack-ansible21:38
openstackgerritJesse Pretorius proposed openstack/openstack-ansible: Updated the repo-build process  https://review.openstack.org/23071621:46
*** jmckind_ has quit IRC22:04
*** sigmavirus24 is now known as sigmavirus24_awa22:08
*** galstrom is now known as galstrom_zzz22:25
*** woodard has quit IRC22:42
*** woodard has joined #openstack-ansible22:43
*** gjn has joined #openstack-ansible22:43
*** daneyon has quit IRC22:55
*** daneyon has joined #openstack-ansible23:03
*** k_stev has quit IRC23:08
*** darrenc is now known as darrenc_afk23:20
*** sdake has quit IRC23:22
*** darrenc has joined #openstack-ansible23:28
*** kerwin_bai has joined #openstack-ansible23:29
*** darrenc_afk has quit IRC23:30
*** persia has quit IRC23:30
*** persia has joined #openstack-ansible23:30
*** miguelgrinberg has quit IRC23:31
*** miguelgrinberg has joined #openstack-ansible23:31
*** kerwin_bai1 has joined #openstack-ansible23:33
*** kerwin_bai has quit IRC23:33
*** kerwin_bai1 is now known as kerwin_bai23:33
*** metral has quit IRC23:34
*** bapalm has quit IRC23:34
*** alop has quit IRC23:38
openstackgerritMerged openstack/openstack-ansible: Neutron Post Install Uses Deprecated Keystone Client, Sets Needless Fact  https://review.openstack.org/23556523:39
openstackgerritMerged openstack/openstack-ansible: Set cinder_service_region to service_region by default  https://review.openstack.org/23510123:39
*** bapalm has joined #openstack-ansible23:39
*** metral has joined #openstack-ansible23:42
openstackgerritMerged openstack/openstack-ansible: Enable Horizon multidomain configuration  https://review.openstack.org/23510223:43
*** phschwartz has quit IRC23:54
*** neilus has quit IRC23:54
*** dstanek has quit IRC23:54
*** lkoranda has quit IRC23:54
*** Mudpuppy has quit IRC23:54
*** evrardjp has quit IRC23:54
*** jmccrory has quit IRC23:54
*** dmsimard has quit IRC23:54
*** mancdaz has quit IRC23:54
*** git-harry has quit IRC23:54
*** grumpycatt has quit IRC23:54
*** marekd has quit IRC23:54
*** darrenc has quit IRC23:54
*** gjn has quit IRC23:54
*** maximov has quit IRC23:54
*** meteorfox has quit IRC23:54
*** serverascode has quit IRC23:54
*** mfisch has quit IRC23:54
*** bgmccollum has quit IRC23:54
*** misc has quit IRC23:54
*** galstrom_zzz has quit IRC23:54
*** gus has quit IRC23:54
*** neillc has quit IRC23:54
*** bogeyon18 has quit IRC23:54
*** sigmavirus24_awa has quit IRC23:54
*** eglute has quit IRC23:54
*** d34dh0r53 has quit IRC23:54
*** cloudnull has quit IRC23:54
*** jroll has quit IRC23:54
*** palendae has quit IRC23:54
*** dolphm has quit IRC23:54
*** mattoliverau has quit IRC23:54
*** mgagne has quit IRC23:54
*** ChanServ has quit IRC23:54
*** Ti-mo has quit IRC23:54
*** vdo has quit IRC23:54
*** larsks has quit IRC23:54
*** andymccr has quit IRC23:54
*** phalmos has quit IRC23:54
*** wabu has quit IRC23:54
*** prometheanfire has quit IRC23:54
*** rackertom has quit IRC23:54
*** sirushti has quit IRC23:54
*** stevelle has quit IRC23:54
*** persia has quit IRC23:54
*** errr has quit IRC23:54
*** odyssey4me has quit IRC23:54
*** b3rnard0 has quit IRC23:54
*** spotz_zzz has quit IRC23:54
*** bapalm has quit IRC23:54
*** hughsaunders has quit IRC23:55
*** jlvillal has quit IRC23:55
*** antonym has quit IRC23:55
*** mgoddard__ has quit IRC23:55
*** lbragstad has quit IRC23:55
*** pellaeon has quit IRC23:55
*** jaypipes has quit IRC23:55
*** then3rd has quit IRC23:55
*** logan2 has quit IRC23:55
*** alejandrito has quit IRC23:55
*** openstackgerrit has quit IRC23:55
*** ggillies has quit IRC23:55
*** daneyon has quit IRC23:55
*** toddnni has quit IRC23:55
*** charz has quit IRC23:55
*** agireud has quit IRC23:55
*** finchd-also has quit IRC23:55
*** mattt has quit IRC23:55
*** arbrandes has quit IRC23:55
*** kerwin_bai has quit IRC23:55
*** miguelgrinberg has quit IRC23:55
*** jwitk0 has quit IRC23:55
*** timrc has quit IRC23:55
*** rromans has quit IRC23:55
*** mrda has quit IRC23:55
*** mhayden has quit IRC23:55
*** xar- has quit IRC23:55
*** andyhky has quit IRC23:55
*** thrawn01 has quit IRC23:55
*** jasondotstar has quit IRC23:55
*** pabelanger has quit IRC23:55
*** e-vad has quit IRC23:55
*** metral has quit IRC23:55
*** woodard has quit IRC23:55
*** Bjoern_ has quit IRC23:55
*** elo has quit IRC23:55
*** harlowja has quit IRC23:55
*** jcannava has quit IRC23:55
*** erikmwilson has quit IRC23:55
*** jwagner_away has quit IRC23:55
*** coolj has quit IRC23:55
*** Apsu has quit IRC23:55
*** mrodden has quit IRC23:55
*** raginbajin has quit IRC23:55
*** Sam-I-Am has quit IRC23:55
*** jhesketh has quit IRC23:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!