| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 00:11 |
|---|---|---|
| *** v1k0d3n has joined #openstack-ansible | 00:12 | |
| *** klamath has quit IRC | 00:14 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_nova: Link libvirt libs from distro package https://review.openstack.org/396821 | 00:14 |
| *** chris_hultin is now known as chris_hultin|AWA | 00:15 | |
| *** v1k0d3n has quit IRC | 00:17 | |
| *** hfu has joined #openstack-ansible | 00:17 | |
| *** rmelero has quit IRC | 00:19 | |
| *** kjw3 has quit IRC | 00:21 | |
| *** thorst_ has quit IRC | 00:23 | |
| *** spotz is now known as spotz_zzz | 00:26 | |
| *** thorst has joined #openstack-ansible | 00:30 | |
| *** thorst has quit IRC | 00:34 | |
| *** thorst has joined #openstack-ansible | 00:35 | |
| *** Mudpuppy_ has joined #openstack-ansible | 00:36 | |
| *** Mudpuppy has quit IRC | 00:39 | |
| *** thorst has quit IRC | 00:43 | |
| *** javeriak has quit IRC | 00:46 | |
| *** javeriak has joined #openstack-ansible | 00:46 | |
| *** kstev has quit IRC | 00:51 | |
| *** v1k0d3n has joined #openstack-ansible | 00:55 | |
| *** severion has joined #openstack-ansible | 00:59 | |
| *** v1k0d3n has quit IRC | 01:02 | |
| *** karimb has quit IRC | 01:03 | |
| *** kstev has joined #openstack-ansible | 01:03 | |
| *** kstev has quit IRC | 01:07 | |
| *** woodard has quit IRC | 01:13 | |
| *** woodard has joined #openstack-ansible | 01:14 | |
| *** javeriak has quit IRC | 01:14 | |
| *** phalmos has quit IRC | 01:18 | |
| *** kstev has joined #openstack-ansible | 01:19 | |
| *** javeriak has joined #openstack-ansible | 01:24 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_nova: Link libvirt libs from distro package https://review.openstack.org/396821 | 01:26 |
| *** thorst has joined #openstack-ansible | 01:41 | |
| *** javeriak has quit IRC | 01:44 | |
| *** thorst has quit IRC | 01:45 | |
| openstackgerrit | Merged openstack/openstack-ansible-security: Set cn_map permissions/owner https://review.openstack.org/397893 | 01:50 |
| *** severion has quit IRC | 01:56 | |
| *** v1k0d3n has joined #openstack-ansible | 01:56 | |
| *** v1k0d3n has quit IRC | 01:59 | |
| *** f13o has joined #openstack-ansible | 02:00 | |
| *** v1k0d3n has joined #openstack-ansible | 02:00 | |
| *** f13o has quit IRC | 02:06 | |
| *** markvoelker has quit IRC | 02:18 | |
| *** adrian_otto has quit IRC | 02:19 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 02:24 |
| *** kstev has quit IRC | 02:28 | |
| *** v1k0d3n has quit IRC | 02:29 | |
| *** v1k0d3n has joined #openstack-ansible | 02:29 | |
| *** thorst has joined #openstack-ansible | 02:33 | |
| *** thorst has quit IRC | 02:35 | |
| *** thorst has joined #openstack-ansible | 02:36 | |
| *** Mudpuppy_ has quit IRC | 02:40 | |
| *** kstev has joined #openstack-ansible | 02:41 | |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_nova: Link libvirt libs from distro package https://review.openstack.org/396821 | 02:42 |
| *** severion has joined #openstack-ansible | 02:42 | |
| *** thorst has quit IRC | 02:44 | |
| *** v1k0d3n has quit IRC | 02:46 | |
| *** thorst has joined #openstack-ansible | 02:56 | |
| *** jlockwood has quit IRC | 02:57 | |
| *** thorst has quit IRC | 02:59 | |
| *** dxiri has joined #openstack-ansible | 03:07 | |
| *** zz_pwnall1337 is now known as pwnall1337 | 03:09 | |
| *** pwnall1337 is now known as zz_pwnall1337 | 03:10 | |
| *** dxiri has quit IRC | 03:12 | |
| *** markvoelker has joined #openstack-ansible | 03:19 | |
| *** markvoelker has quit IRC | 03:25 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 03:41 |
| *** dxiri has joined #openstack-ansible | 03:44 | |
| *** dxiri has quit IRC | 03:48 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 03:52 |
| *** kstev has quit IRC | 03:54 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 03:57 |
| *** thorst has joined #openstack-ansible | 04:00 | |
| *** thorst has quit IRC | 04:08 | |
| *** javeriak has joined #openstack-ansible | 04:21 | |
| openstackgerrit | Syed Ali Jabir proposed openstack/openstack-ansible-os_neutron: Remove stale entries of networking-plumgrid in upgrade path https://review.openstack.org/398854 | 04:22 |
| *** adrian_otto has joined #openstack-ansible | 04:34 | |
| *** javeriak has quit IRC | 04:41 | |
| *** xar- has quit IRC | 04:52 | |
| *** xar- has joined #openstack-ansible | 04:53 | |
| *** vishwanathj has joined #openstack-ansible | 05:05 | |
| *** thorst has joined #openstack-ansible | 05:06 | |
| *** severion has quit IRC | 05:07 | |
| *** shausy has joined #openstack-ansible | 05:08 | |
| *** v1k0d3n has joined #openstack-ansible | 05:08 | |
| *** v1k0d3n has quit IRC | 05:11 | |
| *** v1k0d3n has joined #openstack-ansible | 05:12 | |
| *** thorst has quit IRC | 05:14 | |
| *** v1k0d3n has quit IRC | 05:17 | |
| *** v1k0d3n has joined #openstack-ansible | 05:18 | |
| *** markvoelker has joined #openstack-ansible | 05:20 | |
| openstackgerrit | Syed Ali Jabir proposed openstack/openstack-ansible-os_neutron: Remove stale entries of networking-plumgrid in upgrade path https://review.openstack.org/398854 | 05:21 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Fix stevedore warnings https://review.openstack.org/398977 | 05:23 |
| *** markvoelker has quit IRC | 05:25 | |
| *** phalmos has joined #openstack-ansible | 05:25 | |
| *** javeriak has joined #openstack-ansible | 05:30 | |
| *** vnogin has joined #openstack-ansible | 05:34 | |
| *** vnogin has quit IRC | 05:38 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 05:39 |
| *** javeriak has quit IRC | 05:43 | |
| *** phalmos has quit IRC | 05:46 | |
| *** janki has joined #openstack-ansible | 05:47 | |
| *** javeriak has joined #openstack-ansible | 05:58 | |
| *** v1k0d3n has quit IRC | 06:00 | |
| *** yatin_ has joined #openstack-ansible | 06:04 | |
| *** thorst has joined #openstack-ansible | 06:13 | |
| *** mgagne has quit IRC | 06:18 | |
| *** adrian_otto has quit IRC | 06:18 | |
| *** thorst has quit IRC | 06:19 | |
| *** zz_pwnall1337 has quit IRC | 06:19 | |
| *** aetaric has quit IRC | 06:19 | |
| *** hughsaunders has quit IRC | 06:20 | |
| *** aetaric has joined #openstack-ansible | 06:21 | |
| *** zz_pwnall1337 has joined #openstack-ansible | 06:21 | |
| *** mgagne has joined #openstack-ansible | 06:21 | |
| *** mgagne is now known as Guest52285 | 06:21 | |
| *** hughsaunders has joined #openstack-ansible | 06:23 | |
| *** mheremans has quit IRC | 06:28 | |
| *** javeriak has quit IRC | 06:31 | |
| *** mheremans has joined #openstack-ansible | 06:32 | |
| *** jamielennox is now known as jamielennox|away | 06:36 | |
| *** May-meimei has quit IRC | 06:48 | |
| *** fxpester has joined #openstack-ansible | 06:59 | |
| *** thorst has joined #openstack-ansible | 07:16 | |
| *** thorst has quit IRC | 07:23 | |
| *** oanson has joined #openstack-ansible | 07:31 | |
| *** drifterza has joined #openstack-ansible | 07:36 | |
| *** hfu has quit IRC | 07:38 | |
| *** hfu has joined #openstack-ansible | 07:40 | |
| *** n3v3rm0r3r has joined #openstack-ansible | 07:44 | |
| *** woodard has quit IRC | 07:44 | |
| *** pcaruana has joined #openstack-ansible | 07:45 | |
| *** oanson has quit IRC | 07:46 | |
| *** f13o has joined #openstack-ansible | 07:52 | |
| *** oanson has joined #openstack-ansible | 07:59 | |
| *** v1k0d3n has joined #openstack-ansible | 08:00 | |
| *** jamielennox|away is now known as jamielennox | 08:03 | |
| *** openstackgerrit has quit IRC | 08:03 | |
| *** vishwana_ has joined #openstack-ansible | 08:03 | |
| *** openstackgerrit has joined #openstack-ansible | 08:04 | |
| *** vishwanathj has quit IRC | 08:05 | |
| *** v1k0d3n has quit IRC | 08:05 | |
| *** rgogunskiy has joined #openstack-ansible | 08:06 | |
| *** thorst has joined #openstack-ansible | 08:21 | |
| *** thorst has quit IRC | 08:28 | |
| *** pmannidi has quit IRC | 08:45 | |
| *** pmannidi has joined #openstack-ansible | 08:58 | |
| *** yatin_ has quit IRC | 09:07 | |
| neith | anyone succeded using OSA with 1 bond and multiple vlans for all the bridges? | 09:09 |
| *** yatin_ has joined #openstack-ansible | 09:12 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_barbican: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399456 | 09:14 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399457 | 09:14 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_designate: [New files - needs update] Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399458 | 09:15 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_heat: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399459 | 09:16 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_keystone: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399460 | 09:17 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-18 https://review.openstack.org/399465 | 09:25 |
| *** thorst has joined #openstack-ansible | 09:26 | |
| *** yatin_ has quit IRC | 09:27 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399470 | 09:28 |
| *** karimb has joined #openstack-ansible | 09:29 | |
| *** yatin_ has joined #openstack-ansible | 09:31 | |
| *** thorst has quit IRC | 09:34 | |
| *** yatin_ has quit IRC | 09:34 | |
| *** yatin_ has joined #openstack-ansible | 09:39 | |
| *** hfu has quit IRC | 09:43 | |
| *** derekjhyang has quit IRC | 09:51 | |
| *** pperezrubio has left #openstack-ansible | 09:55 | |
| drifterza | Hello all | 10:05 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399457 | 10:06 |
| andymccr | morning drifterza | 10:06 |
| drifterza | I have like no motivation today | 10:06 |
| andymccr | friday! | 10:07 |
| evrardjp | sad story | 10:07 |
| drifterza | yeah | 10:08 |
| drifterza | I'm really struggling | 10:08 |
| drifterza | lol | 10:08 |
| evrardjp | too much alcohol yesterday? :p | 10:08 |
| evrardjp | joking | 10:08 |
| drifterza | if only | 10:08 |
| drifterza | this time of year, its been a rough one | 10:09 |
| drifterza | andymccr, wheres that PR for tempest testing neutron you did ? | 10:14 |
| andymccr | drifterza: the full tempest test? | 10:14 |
| drifterza | yeah | 10:14 |
| andymccr | https://review.openstack.org/#/c/387457/ | 10:15 |
| andymccr | i need to look at OVS at some point - because i think those tests are far more useful than the api ones we're currently doing | 10:15 |
| drifterza | thanks | 10:15 |
| evrardjp | andymccr: are we sure about that? | 10:16 |
| andymccr | sure about what evrardjp? :D | 10:16 |
| evrardjp | oh my gosh you're not in my head. I told that like you were! | 10:16 |
| evrardjp | are we sure it's a good idea to have the tempest testing for neutron | 10:17 |
| evrardjp | having a full stack | 10:17 |
| andymccr | ahh - yeah i mean id love to not have to do that, but i do know that our current tests for neutron will pass even if some services are not started | 10:17 |
| evrardjp | because it lengthens the tests for no reason... | 10:17 |
| evrardjp | yes for a reason, but I think it may be overkill | 10:18 |
| evrardjp | but on the plus side, it opens the way for shaker | 10:18 |
| evrardjp | https://github.com/openstack/shaker | 10:18 |
| evrardjp | which could be valuable (or not), but at least the door is opened | 10:19 |
| andymccr | yeah im open to suggestions or better options, but i do want to be in a place where tests will fail if things are not working :P | 10:19 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399495 | 10:19 |
| evrardjp | andymccr: do you have a bug filed where I could help you? | 10:20 |
| evrardjp | or some reference | 10:20 |
| andymccr | evrardjp: no, but i should file one. lemme add it to my list for today | 10:20 |
| andymccr | although its mostly anecdotal | 10:22 |
| evrardjp | yeah, I can't fix what I don't know | 10:22 |
| evrardjp | ok | 10:22 |
| evrardjp | up to you | 10:22 |
| drifterza | I'm just trying to get neutron to use tempest directly | 10:22 |
| drifterza | But I'm less than useless today | 10:22 |
| andymccr | hahaha | 10:22 |
| andymccr | no stress | 10:22 |
| drifterza | I have a PR https://review.openstack.org/#/c/398923/ | 10:22 |
| drifterza | but with ovs vs calico I'm a fail | 10:22 |
| andymccr | drifterza: i think with the API tests they should be ok - calico is non-voting right now | 10:23 |
| andymccr | although i spoke to logan- briefly at the summit and there is a sample conf in one of the etherpads to make calico work with some of the tests... which i should definitely add as a bug that somebody can work | 10:24 |
| drifterza | I was using : neutron.tempest.scenario.test_network_basic_ops | 10:24 |
| andymccr | ahh drifterza yeah those are the ones i want to do, but it wont work without nova and a whole bunch of other services | 10:24 |
| andymccr | stick to the current api ones imo. | 10:24 |
| andymccr | or at least for moving to the new tempest format | 10:24 |
| drifterza | yeah | 10:24 |
| andymccr | the problem is, my networking (and specifically OVS) is not amazing, so trying to fix OVS to work with those func tests will take a bit of ramp-up for me. | 10:25 |
| *** cathrichardson has quit IRC | 10:25 | |
| *** cathrichardson has joined #openstack-ansible | 10:25 | |
| drifterza | http://logs.openstack.org/23/398923/4/check/gate-openstack-ansible-os_neutron-ansible-func-ubuntu-trusty/bc4bb1a/console.html#_2016-11-17_11_50_23_661283 | 10:26 |
| drifterza | but thats already in neutron-overrides-* | 10:26 |
| drifterza | or do they need to be named os_neutron-overrides-ovs.yml IE | 10:27 |
| *** winggundamth has quit IRC | 10:28 | |
| *** Andrew_jedi has joined #openstack-ansible | 10:29 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 14.0.3 https://review.openstack.org/399502 | 10:30 |
| andymccr | drifterza: yeah they wont use the same overrides file. | 10:30 |
| andymccr | plus the plugin type should be different for each | 10:31 |
| andymccr | oh you mean the file names | 10:31 |
| andymccr | hmm | 10:31 |
| andymccr | that depends on tox.ini | 10:31 |
| andymccr | neutron-overrides-ovs.yml is the correct name for ovs overrides | 10:32 |
| andymccr | you can check in tox.ini you'll see testenv:func_ovs and testenv:calico and | 10:32 |
| andymccr | etc. | 10:32 |
| andymccr | and it'll point to ANSIBLE_OVERRIDES= | 10:32 |
| *** thorst has joined #openstack-ansible | 10:33 | |
| *** electrofelix has joined #openstack-ansible | 10:33 | |
| Andrew_jedi | Folks, Mitaka build is failing at infrastructure playbook. Got these messages: W: Failed to fetch https://repo.percona.com/apt/dists/trusty/main/binary-amd64/Packages Hash Sum mismatch | 10:33 |
| Andrew_jedi | E: Some index files failed to download. They have been ignored, or old ones used instead. | 10:33 |
| andymccr | Andrew_jedi: can you try manually doing an apt-get update on the galera host - also is it failing on all galera hosts or just one? - that could be an issue with the percona repository itself | 10:36 |
| Andrew_jedi | andymccr: Any idea as to why are we installing percona when we use mariadb? | 10:36 |
| andymccr | drifterza: one other thing - if it's not seeing the plugin_type that means it's not importing the common/test-vars.yml file | 10:36 |
| andymccr | Andrew_jedi: I believe (somebody can correct me here if I'm wrong!) it's for xtrabackup | 10:37 |
| *** thorst has quit IRC | 10:39 | |
| evrardjp | hughsaunders: when you have time, could you have a look at https://review.openstack.org/#/c/392277/ ? I'd be happy to discuss it over drinks | 10:40 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Using updated tempest method for neutron. https://review.openstack.org/398923 | 10:41 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Using updated tempest method for neutron. https://review.openstack.org/398923 | 10:42 |
| drifterza | What? | 10:43 |
| drifterza | Wheres the drinks | 10:43 |
| evrardjp | drifterza: now you're awaken up! | 10:45 |
| Andrew_jedi | andymccr: How can i disable xtrabackup package download in "galera_server" defaults ? | 10:47 |
| odyssey4me | Andrew_jedi the percona packages are essential for sucessful backups | 10:50 |
| odyssey4me | and for proper SST's between galera nodes | 10:50 |
| Andrew_jedi | odyssey4me: Ohh, ok. Looks like their repo is broken right now. | 10:51 |
| evrardjp | again? | 10:54 |
| Andrew_jedi | trying one more time. | 10:55 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Using updated tempest method for neutron. https://review.openstack.org/398923 | 11:02 |
| *** McMurlock1 has joined #openstack-ansible | 11:02 | |
| *** vnogin has joined #openstack-ansible | 11:03 | |
| *** jperry has joined #openstack-ansible | 11:04 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 13.3.9 https://review.openstack.org/399523 | 11:05 |
| *** McMurlock1 has quit IRC | 11:07 | |
| *** vnogin has quit IRC | 11:08 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 12.2.9 https://review.openstack.org/399527 | 11:12 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 14.0.3 https://review.openstack.org/399502 | 11:13 |
| *** vnogin has joined #openstack-ansible | 11:14 | |
| *** yatin_ has quit IRC | 11:15 | |
| drifterza | andymccr, odyssey4me | 11:16 |
| drifterza | https://review.openstack.org/#/c/399502/ the sha bumps, where are the designate and trove repos ? | 11:17 |
| andymccr | drifterza: they'll be in the M1 for Ocata | 11:18 |
| drifterza | ah shit, so no backporting to newton ? | 11:18 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 13.3.9 https://review.openstack.org/399523 | 11:18 |
| andymccr | drifterza: nope. I mean assuming the role existing (and wasnt part of the integrated build) it will still be there and work, it just isn't part of the release for Newton. | 11:19 |
| drifterza | ah okay | 11:19 |
| drifterza | Ill just pull them in seperately when deploying | 11:19 |
| odyssey4me | drifterza yeah, those roles weren't part of the newton release - we only integrated them later | 11:21 |
| odyssey4me | you'll notice that they have no stable/newton branches ;) | 11:22 |
| drifterza | yeah I saw:), was wondering if it were possible to port them to stable/newton. But I understand.. | 11:22 |
| drifterza | yay | 11:24 |
| drifterza | neutron using updated tempest method is working now | 11:24 |
| *** stuartgr has joined #openstack-ansible | 11:26 | |
| drifterza | thanks andymccr, your suggestion to test only the api's did help | 11:27 |
| drifterza | https://review.openstack.org/#/c/398923/ | 11:30 |
| *** shausy has quit IRC | 11:32 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible-os_designate: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399458 | 11:33 |
| andymccr | drifterza: sweet yeah, the func ones should work for linuxbridge but ovs wont | 11:33 |
| andymccr | with the new method that could probably be hacked so that lxb uses the scenarios and ovs uses api | 11:34 |
| drifterza | indeed | 11:34 |
| drifterza | could probably have neutron-overrides-lxb.yml | 11:35 |
| Andrew_jedi | percona repo is working now. :) | 11:35 |
| *** khamtamtun has joined #openstack-ansible | 11:35 | |
| drifterza | if this PR gets merged andymccr, I can work on adding the lxb to functional tests | 11:36 |
| *** thorst has joined #openstack-ansible | 11:36 | |
| *** woodard has joined #openstack-ansible | 11:37 | |
| *** woodard has quit IRC | 11:42 | |
| *** thorst has quit IRC | 11:44 | |
| *** janki has quit IRC | 11:46 | |
| *** smatzek has joined #openstack-ansible | 11:46 | |
| *** smatzek has quit IRC | 11:47 | |
| *** smatzek has joined #openstack-ansible | 11:47 | |
| Andrew_jedi | Folks, can i install Newton on Xenial ? | 11:52 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Using updated tempest method for neutron. https://review.openstack.org/398923 | 11:53 |
| andymccr | Andrew_jedi: yes! actually it's recommended if it's greenfield | 11:54 |
| andymccr | because during Ocata we're going to remove trusty support | 11:54 |
| andymccr | so Newton is the one release where both trusty and xenial are supported | 11:55 |
| andymccr | the idea being if you were on lib/mitaka --> newton where you then have to perform the OS upgrade, and then move to Ocata. | 11:56 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_ceilometer: Using updated tempest method for ceilometer. https://review.openstack.org/398915 | 11:59 |
| *** hfu has joined #openstack-ansible | 11:59 | |
| drifterza | thanks odyssey4me | 12:03 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 12:03 |
| drifterza | Will be making those changes now | 12:03 |
| *** Andrew_jedi has quit IRC | 12:03 | |
| odyssey4me | drifterza the comment for the tempest playbook in tests.yml - it's probably best to change them all to state 'Install and execute tempest' | 12:04 |
| odyssey4me | it just makes it easier to understand where tempest is executed | 12:04 |
| drifterza | cool | 12:04 |
| *** Andrew_jedi has joined #openstack-ansible | 12:04 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 12:10 |
| *** khamtamtun has quit IRC | 12:12 | |
| *** asettle has joined #openstack-ansible | 12:17 | |
| pjm6 | good morning all | 12:17 |
| *** asettle has quit IRC | 12:18 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_neutron: Remove mistaken 'neutron_pip_package_state' variable usage https://review.openstack.org/399567 | 12:19 |
| *** derekjhyang has joined #openstack-ansible | 12:21 | |
| Andrew_jedi | andymccr: Ohkay! Thanks a lot for the information :) | 12:23 |
| openstackgerrit | Merged openstack/openstack-ansible-os_nova: Using updated tempest method for nova. https://review.openstack.org/398865 | 12:24 |
| yolanda | odyssey4me, so i did a try with creating tun/tap devices and bridges on top, but build was failing. I got timeouts when waiting for ssh | 12:27 |
| yolanda | br-mgmt got into the vlan with network access, and the br-vlan, br-vlan and br-storage got into virtual interfaces | 12:28 |
| *** Andrew_jedi has quit IRC | 12:31 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_aodh: Using updated tempest method for aodh api. https://review.openstack.org/398910 | 12:34 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_cinder: Using updated tempest method for cinder. https://review.openstack.org/398884 | 12:35 |
| *** retreved has joined #openstack-ansible | 12:36 | |
| odyssey4me | drifterza if you have review in flight and are planning to revise them, please put -w on them so that reviewers are aware that you're planning adjustments | 12:36 |
| odyssey4me | otherwise people may end up reviewing something you're planning to change :) | 12:36 |
| drifterza | so git review -w | 12:37 |
| drifterza | ? | 12:37 |
| odyssey4me | well, I just do -w in gerrit | 12:37 |
| odyssey4me | not sure how to do it in the cmd line | 12:37 |
| drifterza | ah | 12:37 |
| odyssey4me | ie reply, -w | 12:37 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_keystone: Using updated tempest method for keystone. https://review.openstack.org/398987 | 12:40 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_neutron: Using updated tempest method for neutron. https://review.openstack.org/398923 | 12:43 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_keystone: Using updated tempest method for keystone. https://review.openstack.org/398987 | 12:43 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_ceilometer: Using updated tempest method for ceilometer. https://review.openstack.org/398915 | 12:44 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_aodh: Using updated tempest method for aodh api. https://review.openstack.org/398910 | 12:45 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_cinder: Using updated tempest method for cinder. https://review.openstack.org/398884 | 12:46 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_trove: Using updated tempest method for trove api. https://review.openstack.org/398838 | 12:46 |
| *** Jeffrey4l has quit IRC | 12:47 | |
| *** woodard has joined #openstack-ansible | 12:47 | |
| *** woodard has quit IRC | 12:48 | |
| *** woodard has joined #openstack-ansible | 12:48 | |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_horizon: Using updated tempest method for horizon. https://review.openstack.org/398916 | 12:49 |
| openstackgerrit | Logan V proposed openstack/openstack-ansible-os_nova: Link libvirt libs from distro package https://review.openstack.org/396821 | 12:49 |
| openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Remove mistaken 'neutron_pip_package_state' variable usage https://review.openstack.org/399567 | 12:49 |
| openstackgerrit | Donovan Francesco (drifterza) proposed openstack/openstack-ansible-os_designate: Using updated tempest method for designate api. https://review.openstack.org/398846 | 12:50 |
| mhayden | happy friday! | 12:55 |
| mhayden | spotz_zzz: i thought i'd give that [+docs] a try | 12:55 |
| *** retreved has quit IRC | 12:56 | |
| *** thorst has joined #openstack-ansible | 12:59 | |
| *** thorst_ has joined #openstack-ansible | 13:00 | |
| *** vnogin has quit IRC | 13:00 | |
| drifterza | odyssey4me, okay I -w on those PR's | 13:00 |
| drifterza | hopefully they okay now. | 13:00 |
| *** vnogin has joined #openstack-ansible | 13:01 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for 14.0.3 https://review.openstack.org/399502 | 13:02 |
| *** drifterza_ has joined #openstack-ansible | 13:02 | |
| *** thorst has quit IRC | 13:04 | |
| *** drifterza has quit IRC | 13:06 | |
| *** retreved has joined #openstack-ansible | 13:06 | |
| *** vnogin has quit IRC | 13:07 | |
| *** vnogin has joined #openstack-ansible | 13:07 | |
| *** Jeffrey4l has joined #openstack-ansible | 13:07 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 13:08 |
| *** drifterza_ has quit IRC | 13:08 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Apply password quality rules https://review.openstack.org/399186 | 13:10 |
| *** karimb has quit IRC | 13:11 | |
| odyssey4me | logan- commented on https://review.openstack.org/396821 | 13:12 |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 13:12 |
| *** jperry has quit IRC | 13:13 | |
| logan- | got it odyssey4me. checking trusty & cent7 systems atm | 13:22 |
| *** haad1 has joined #openstack-ansible | 13:22 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 13:22 |
| openstackgerrit | Merged openstack/openstack-ansible-security: [Docs] Set cn_map permissions/owner https://review.openstack.org/397894 | 13:23 |
| *** asettle has joined #openstack-ansible | 13:24 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/391486 | 13:28 |
| *** asettle has quit IRC | 13:28 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 13:36 |
| mgariepy | good morning everyone | 13:36 |
| andymccr | morning mgariepy! | 13:37 |
| mgariepy | any core mind +w https://review.openstack.org/#/c/399018/ ? | 13:40 |
| openstackgerrit | Merged openstack/openstack-ansible-os_heat: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399459 | 13:40 |
| mhayden | mgariepy: gotcha | 13:40 |
| andymccr | haha now you got 2! | 13:40 |
| mhayden | DOUBLEFLOW | 13:40 |
| mhayden | that should make jenkins work at 2x speed | 13:40 |
| mgariepy | also this one need some review :D https://review.openstack.org/#/c/399041/ | 13:40 |
| mgariepy | nice :D | 13:40 |
| mhayden | mgariepy: i'll trade you a review on an openstack-ansible-security review ;) | 13:41 |
| mgariepy | i doudt jenkin will work twice as fast tho. | 13:41 |
| mgariepy | haha mhayden ok | 13:41 |
| mhayden | wow, this is one of the rare patches where xenial's test is faster :P | 13:42 |
| mhayden | andymccr: BTW, i heard back from our friends at canonical -- they can reproduce the issue and apparently it is "much deeper" than python | 13:42 |
| andymccr | mhayden: does it go ALL the way up | 13:42 |
| mhayden | i think Apsu has earned a cookie -- it's most likely gcc/glibc | 13:42 |
| andymccr | hahahah | 13:42 |
| andymccr | Apsu has enough cookies!! | 13:43 |
| andymccr | but mhayden its awesome that we've uncovered this and are getting it fixed | 13:43 |
| mhayden | andymccr: i did some quick tests with keystone on 14.04, 16.04 -- its performance is affected too | 13:43 |
| mhayden | i tried just running loops against the API | 13:44 |
| andymccr | thats kinda crazy haha | 13:44 |
| mhayden | well, when fedora adopted gcc 5.x for the first time, there were lots of problems | 13:44 |
| mhayden | but i figured they were ironed out by now | 13:44 |
| mhayden | perhaps there's a regression buried in there | 13:44 |
| *** rgogunskiy has quit IRC | 13:47 | |
| mgariepy | mhayden, http://paste.openstack.org/show/589712/ | 13:48 |
| mgariepy | on centos. | 13:48 |
| openstackgerrit | Merged openstack/openstack-ansible-os_designate: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399458 | 13:49 |
| *** markvoelker has joined #openstack-ansible | 13:49 | |
| mgariepy | mhayden, related to : https://review.openstack.org/#/c/399255/3/tasks/rhel7stig/file_perms.yml | 13:49 |
| mhayden | ah okay -- let me take a look | 13:49 |
| *** dmellado is now known as dmellado|lunch | 13:50 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Backport of package optimization https://review.openstack.org/399598 | 13:51 |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399460 | 13:51 |
| mhayden | mgariepy: ah, looks like the -fstype needs to go last | 13:52 |
| mhayden | nice catch | 13:52 |
| mhayden | i missed that | 13:52 |
| mgariepy | and will this parse /proc and /sys ? not quite sure the what the -fstype local do | 13:52 |
| openstackgerrit | Merged openstack/openstack-ansible-os_ceilometer: Update paste, policy and rootwrap configurations 2016-11-18 https://review.openstack.org/399457 | 13:54 |
| odyssey4me | mhayden so canonical has confirmed that it's turtles all the way down? | 13:55 |
| mhayden | odyssey4me: confirmed | 13:55 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Move clamav packages to rhel7 vars https://review.openstack.org/399602 | 13:56 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Move clamav packages to rhel7 vars https://review.openstack.org/399602 | 13:57 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Backport of package optimization https://review.openstack.org/399598 | 13:57 |
| openstackgerrit | Merged openstack/openstack-ansible-os_aodh: Standardize tests inventory https://review.openstack.org/399018 | 14:00 |
| odyssey4me | logan- argh re https://review.openstack.org/396821 | 14:03 |
| logan- | yeah | 14:03 |
| *** jbadiapa has joined #openstack-ansible | 14:03 | |
| *** fguillot has joined #openstack-ansible | 14:03 | |
| odyssey4me | maybe our only recourse here is to add a known issue, and a docs entry somewhere, which states that distro package updates for nova compute nodes, specifically for that package, must be done by the playbook in order to maintain the links | 14:04 |
| odyssey4me | I can't decide whether this is worth it all though - it seems far better to add a known issue stating that the version of libvirt between the repo server and the compute nodes must be the same... then avoid all the linking altogether. | 14:05 |
| logan- | we could pin the distro package | 14:05 |
| odyssey4me | pinning is something we did in juno, it ended badly | 14:06 |
| logan- | i wonder if the linking should default to off, and maybe it should be part of the upgrade process to enable it and then disable it at the end | 14:06 |
| odyssey4me | ubuntu pulls packages more than 5 revisions back | 14:06 |
| logan- | ie we don't support mixed envs but we'll accommodate it during the upgrade | 14:06 |
| odyssey4me | well, that's why I was thinking about some sort of detection for the wrong version of libvirt being there | 14:06 |
| odyssey4me | if your libvirt differs from the repo server libvirt, then link - otherwise carry on | 14:07 |
| logan- | hmm yeah | 14:07 |
| logan- | that's maybe possible with the .egg-info file | 14:07 |
| odyssey4me | hmm, well - if you can figure out a way to make that happen then that sounds like a perfect option | 14:08 |
| logan- | you could pip freeze the venv and detect the version installed | 14:08 |
| logan- | i'll look into it | 14:08 |
| logan- | nvm the version thing | 14:08 |
| odyssey4me | otherwise we just add some data into the venv at the repo server | 14:08 |
| *** phalmos has joined #openstack-ansible | 14:10 | |
| mgariepy | out of curiosity how would an upgrade from 14.04 to 16.04 works in newton ? upgrade control plane one by one, then the compute in small groups ? | 14:11 |
| *** dmellado|lunch is now known as dmellado | 14:12 | |
| *** phalmos has quit IRC | 14:13 | |
| *** jmckind has joined #openstack-ansible | 14:15 | |
| *** v1k0d3n has joined #openstack-ansible | 14:16 | |
| *** jperry has joined #openstack-ansible | 14:20 | |
| *** johnmilton has joined #openstack-ansible | 14:21 | |
| odyssey4me | mgariepy generally speaking, my thinking was to wholesale replace each control plane host one at a time | 14:25 |
| logan- | mgariepy: that's what I'm thinking. 2 phase upgrade: get everything to newton, then do a rolling upgrade across control/compute. | 14:25 |
| odyssey4me | ie turn it off, wipe it, rebuild it with xenial, re-execute plays against it | 14:25 |
| *** severion has joined #openstack-ansible | 14:25 | |
| odyssey4me | once that's back in and the dust has settled, do control plane host 2 | 14:25 |
| logan- | +1 planning to do a clean wipe on the control nodes | 14:25 |
| logan- | or rather, drive swap because i'm not gutsy enough to wipe the old drives :) | 14:25 |
| odyssey4me | I don't think an in-place OS upgrade is a good idea, but that *might* work... but seeing as you need to rebuild the containers anyway - what's the point | 14:26 |
| odyssey4me | logan- good plan :) | 14:26 |
| odyssey4me | it'd be nice if someone could test the theory and blog post it | 14:26 |
| odyssey4me | or maybe even add it to the Newton upgrade guide | 14:26 |
| mgariepy | yeah i'll probably do drive swap as well. | 14:26 |
| mgariepy | no release upgrade -- ever | 14:27 |
| mgariepy | been bite by it twice for my laptop lol | 14:27 |
| *** karimb has joined #openstack-ansible | 14:27 | |
| *** v1k0d3n has quit IRC | 14:28 | |
| *** jheroux has joined #openstack-ansible | 14:28 | |
| *** haad1 has quit IRC | 14:29 | |
| *** johnmilton has quit IRC | 14:29 | |
| *** severion has quit IRC | 14:30 | |
| *** derekjhyang has quit IRC | 14:31 | |
| andymccr | can i get some reviews on: https://review.openstack.org/#/c/399561/ so we can get that merged. it's passing the trusty gate already - just waiting on xenial to finish | 14:32 |
| andymccr | (xenial is non-voting at the moment) | 14:32 |
| odyssey4me | logan- ^ that's an urgent review for the M1 release of Ocata | 14:38 |
| andymccr | ahh xenial has passed now too :D yeah any cores around would be great to get that one through so i can get the release in ontime(+x where x is the amount that i am currently late plus a few hours) :P | 14:39 |
| odyssey4me | interesting to see that the build time differential between newton and master is still around 10 mins - even with the backported optimisations in https://review.openstack.org/399502 | 14:39 |
| logan- | looking | 14:39 |
| odyssey4me | ie Ansible 2.2 cuts the build time for the AIO by at least 10 mins | 14:40 |
| andymccr | thanks :) | 14:40 |
| *** victorhe has joined #openstack-ansible | 14:41 | |
| logan- | yep odyssey4me -- I see about 15 mins difference between master/newton on my end, but slower builds. probably about the same % diff | 14:42 |
| *** hfu has quit IRC | 14:43 | |
| odyssey4me | so I guess now the trick is to hunt for repetitive tasks, multiple tasks which can be consolidated and those sorts of things and optimise them | 14:43 |
| *** dxiri has joined #openstack-ansible | 14:43 | |
| *** hfu has joined #openstack-ansible | 14:45 | |
| *** berendt has joined #openstack-ansible | 14:49 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Backport of package optimization https://review.openstack.org/399598 | 14:52 |
| mgariepy | why not install pip in the container archive when creating it ? | 14:52 |
| mgariepy | or find a way not to install pip 4 times in the each container when jenkins tests stuff. | 14:53 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 14:53 |
| *** karimb has quit IRC | 14:53 | |
| *** asettle has joined #openstack-ansible | 14:54 | |
| neith | guys, mu OS cluster is now up | 14:54 |
| neith | thks | 14:54 |
| odyssey4me | neith woot! | 14:54 |
| mgariepy | congrats neith | 14:54 |
| neith | I must admit the net conf is the worst part for me | 14:55 |
| *** klamath has joined #openstack-ansible | 14:55 | |
| neith | before using OS I did not even knew what was namespace for networks | 14:55 |
| neith | LOL | 14:55 |
| openstackgerrit | Pedro Perez proposed openstack/openstack-ansible-os_cloudkitty: update naming conventions for secret vars https://review.openstack.org/397784 | 14:55 |
| *** v1k0d3n has joined #openstack-ansible | 14:56 | |
| *** adrian_otto has joined #openstack-ansible | 14:57 | |
| *** asettle has quit IRC | 14:58 | |
| openstackgerrit | Pedro Perez proposed openstack/openstack-ansible: Add Cloudkitty to integrated repo. https://review.openstack.org/397313 | 15:03 |
| odyssey4me | the longest and perhaps one of the hardest troubleshooting processes, ever http://lists.openstack.org/pipermail/openstack-operators/2016-November/012156.html | 15:03 |
| *** karimb has joined #openstack-ansible | 15:04 | |
| neith | I need an advice, whats the best solution to monitor/supervise the containers? | 15:04 |
| *** klamath has quit IRC | 15:05 | |
| andymccr | odyssey4me put 1 in the wins column for that | 15:05 |
| *** klamath has joined #openstack-ansible | 15:05 | |
| *** pperezrubio has joined #openstack-ansible | 15:05 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:06 | |
| *** TxGirlGeek has joined #openstack-ansible | 15:08 | |
| *** kstev has joined #openstack-ansible | 15:12 | |
| *** vnogin has quit IRC | 15:14 | |
| *** vnogin has joined #openstack-ansible | 15:15 | |
| *** weezS has joined #openstack-ansible | 15:18 | |
| *** victorhe has quit IRC | 15:22 | |
| *** haad1 has joined #openstack-ansible | 15:22 | |
| *** victorhe has joined #openstack-ansible | 15:22 | |
| *** spotz_zzz is now known as spotz | 15:25 | |
| *** victorhe has quit IRC | 15:27 | |
| *** adrian_otto has quit IRC | 15:27 | |
| *** oanson has quit IRC | 15:29 | |
| openstackgerrit | Merged openstack/openstack-ansible: Fix role SHA's for Ocata-1 release https://review.openstack.org/399561 | 15:32 |
| *** karimb has quit IRC | 15:32 | |
| odyssey4me | andymccr ^ gogogogogogo | 15:34 |
| andymccr | haha https://review.openstack.org/399640 | 15:35 |
| andymccr | done already | 15:35 |
| andymccr | litearlly camping that pr :P | 15:35 |
| odyssey4me | LGTM | 15:36 |
| odyssey4me | time for the role pin revert review :) | 15:36 |
| *** fxpester has quit IRC | 15:37 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 15:38 |
| mhayden | spotz: nice catch on ^^ | 15:38 |
| mhayden | should be fixed | 15:38 |
| spotz | :) mhayden that's why you keep me around | 15:38 |
| spotz | mhayden: line 75 need to change too? | 15:39 |
| andymccr | odyssey4me: yeah working that now too | 15:39 |
| *** asettle has joined #openstack-ansible | 15:41 | |
| *** hfu has quit IRC | 15:41 | |
| *** hfu has joined #openstack-ansible | 15:41 | |
| *** berendt has quit IRC | 15:41 | |
| *** hfu has quit IRC | 15:42 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Revert role SHA pin for Ocata-2 development https://review.openstack.org/399648 | 15:42 |
| andymccr | ^ thereya go :D | 15:42 |
| *** hfu has joined #openstack-ansible | 15:42 | |
| openstackgerrit | Pedro Perez proposed openstack/openstack-ansible-os_cloudkitty: update naming conventions for secret vars https://review.openstack.org/397784 | 15:42 |
| *** Mudpuppy has joined #openstack-ansible | 15:43 | |
| *** hfu has quit IRC | 15:43 | |
| *** hfu has joined #openstack-ansible | 15:43 | |
| *** hfu has quit IRC | 15:43 | |
| *** hfu has joined #openstack-ansible | 15:44 | |
| *** hfu has quit IRC | 15:44 | |
| *** hfu has joined #openstack-ansible | 15:45 | |
| odyssey4me | andymccr LGTM | 15:45 |
| odyssey4me | now finally to figure out what's going wrong with the OpenStack SHA bump, but that can wait until next week | 15:45 |
| *** hfu has quit IRC | 15:45 | |
| andymccr | odyssey4me: i started a build to figure that out but yeah probably next weeks task | 15:45 |
| odyssey4me | have a drink :) job well done | 15:45 |
| andymccr | haha first one done - thanks for all the help. | 15:46 |
| openstackgerrit | Amy Marrich (spotz) proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 15:47 |
| yolanda | hi odyssey4me , i'm getting a new error now when deploying: The `lxc` module is not importable. Check the requirements. | 15:47 |
| yolanda | does it sound familiar? | 15:47 |
| odyssey4me | yolanda have you run the -setup-hosts.yml' playbook? | 15:47 |
| openstackgerrit | Merged openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/391486 | 15:48 |
| yolanda | that happens to me on openstack-ansible setup-hosts.yml | 15:48 |
| odyssey4me | yolanda ? that's odd | 15:48 |
| odyssey4me | were there any failures higher up? | 15:48 |
| yolanda | capturing logs now | 15:48 |
| odyssey4me | the use of that module should happen after the installation of the right python package before it | 15:49 |
| odyssey4me | it happens in the lxc-hosts playbook | 15:49 |
| yolanda | i've been redeploying and stopping severla times to test network config | 15:49 |
| yolanda | maybe something got corrupted? | 15:49 |
| *** pcaruana has quit IRC | 15:50 | |
| yolanda | so no errors before | 15:50 |
| yolanda | TASK [lxc_container_create : Create container] ********************************* | 15:51 |
| yolanda | fatal: [infra1_nova_scheduler_container-dd53f669 -> 172.30.13.89]: FAILED! => {"changed": false, "failed": true, "msg": "The `lxc` module is not importable. Check the requirements."} | 15:51 |
| *** victorhe has joined #openstack-ansible | 15:51 | |
| openstackgerrit | Pedro Perez proposed openstack/openstack-ansible: Add Cloudkitty to integrated repo. https://review.openstack.org/397313 | 15:53 |
| odyssey4me | yolanda can you find lxc-python2 anywhere on the host? | 15:53 |
| *** kjw3 has joined #openstack-ansible | 15:53 | |
| *** adrian_otto has joined #openstack-ansible | 15:54 | |
| *** AJaeger has joined #openstack-ansible | 15:55 | |
| yolanda | pip freeze | grep lxc | 15:55 |
| yolanda | You are using pip version 9.0.0, however version 9.0.1 is available. | 15:55 |
| yolanda | You should consider upgrading via the 'pip install --upgrade pip' command. | 15:55 |
| yolanda | lxc-python2==0.1 | 15:55 |
| AJaeger | asettle, it's party time! http://docs.openstack.org/project-deploy-guide/OpenStack-Ansible/draft/index.html | 15:55 |
| asettle | AJaeger: OMG YAY :D | 15:55 |
| asettle | THANK YOU SO MUCH! | 15:55 |
| AJaeger | asettle: so all looks fine ;) | 15:56 |
| asettle | This is super exciting :D | 15:56 |
| asettle | AJaeger: yeah I can't believe how easily that worked! | 15:56 |
| AJaeger | asettle: you did all the hard work, I just gently helped ;) | 15:56 |
| asettle | A lot :p | 15:57 |
| AJaeger | asettle: enjoy the weekend! | 15:57 |
| asettle | Thank you! | 15:57 |
| asettle | AJaeger: do I have to adjust the index file to be able to see it from here: http://docs.openstack.org/ | 15:57 |
| AJaeger | FYI: once there's ocata, you have "ocata" instead of "draft" in the URL. | 15:57 |
| *** kstev has quit IRC | 15:57 | |
| AJaeger | asettle: we should eventually adjust the index and do something similar as for project-install-guide | 15:58 |
| asettle | Oh ahhh. It's not there yet. | 15:58 |
| AJaeger | But the idea with these guides is that the master version is the non-released document, so it's a draft | 15:58 |
| odyssey4me | AJaeger I'll push up some patches to reduce repetition in the docs cookiecutters | 15:58 |
| AJaeger | And we don#t like from docs.o.o directly but only from our draft-index | 15:58 |
| AJaeger | odyssey4me: always welcome ;) | 15:59 |
| asettle | Oh right! I see :) | 15:59 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Backport of package optimization https://review.openstack.org/399598 | 15:59 |
| asettle | AJaeger: I'm happy to adjust the index. | 15:59 |
| *** phalmos has joined #openstack-ansible | 15:59 | |
| asettle | I'm supposed to be off sick today, I'm not doing a great job of it :p | 15:59 |
| AJaeger | asettle: do something like http://docs.openstack.org/project-install-guide/draft/index.html | 15:59 |
| odyssey4me | yolanda haha, the upgrade guide and dev docs are looking lonely now: http://docs.openstack.org/developer/openstack-ansible/#ocata-pre-release | 15:59 |
| AJaeger | asettle: Get well soon! And I'll not bug you anymore ;) If you have questions once you're fine again, ask ;) | 16:00 |
| asettle | AJaeger: thanks so much! I'll work on that on Monday :D | 16:00 |
| asettle | I appreciate your support through all of this! | 16:00 |
| AJaeger | odyssey4me: add the Deplyoment Guide to the Ocata section ;) | 16:01 |
| odyssey4me | yeah, absolutely - thanks AJaeger and asettle for making this happen | 16:01 |
| yolanda | mm, odyssey4me , i think i did a typo on the ips for the hosts | 16:01 |
| odyssey4me | along with the rest of the docs crew that helped | 16:01 |
| AJaeger | and the infra crew ;) | 16:01 |
| asettle | Infra and Anne ;) | 16:01 |
| odyssey4me | yolanda argh | 16:01 |
| odyssey4me | AJaeger :) naturally | 16:01 |
| *** jamesdenton has joined #openstack-ansible | 16:02 | |
| * AJaeger wishes everybody a great weekend, will disappear from this friendly channel again | 16:02 | |
| *** AJaeger has left #openstack-ansible | 16:02 | |
| asettle | Hahhaa Andreas.... | 16:03 |
| *** yatin_ has joined #openstack-ansible | 16:04 | |
| *** phalmos has quit IRC | 16:04 | |
| *** weezS has quit IRC | 16:06 | |
| yolanda | ok, it's now on the "wait for ssh to be available". It normally times out on it | 16:06 |
| *** weezS has joined #openstack-ansible | 16:06 | |
| *** kstev has joined #openstack-ansible | 16:07 | |
| odyssey4me | yolanda the trouble is that if you had the wrong IP's then you'll have duplicate containers in the inventory and will have to purge the old ones | 16:09 |
| yolanda | ouch | 16:09 |
| yolanda | i can redeploy | 16:09 |
| odyssey4me | use the scripts/inventory-manage tool to delete containers | 16:09 |
| yolanda | so it starts from scratch as well | 16:09 |
| odyssey4me | or if no containers have been deployed yet, just destroy the inventory file in /etc/openstack_deploy | 16:10 |
| odyssey4me | it'll regenerate | 16:10 |
| *** Oku_OS is now known as Oku_OS-away | 16:10 | |
| odyssey4me | inventory.json - I think there are some other json files you can remove as well, along with the ansible_facts folder | 16:10 |
| *** kstev has quit IRC | 16:11 | |
| yolanda | ok trying | 16:13 |
| yolanda | is ther a -r --all to remove all containers or something similar? | 16:14 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Standardize tests inventory https://review.openstack.org/399670 | 16:15 |
| *** victorhe has quit IRC | 16:17 | |
| odyssey4me | yolanda nope, not to my knowledge cc palendae | 16:20 |
| odyssey4me | interesting concept though - it might be useful to be able to do things like remove all members of a specified group form the inventory | 16:20 |
| yolanda | or maybe i'm just lazy | 16:20 |
| odyssey4me | ie --remove group/all_containers | 16:20 |
| yolanda | anyway, i tried the -r for several containers, but even when i saw success, they were appearing again on --list-containers | 16:21 |
| yolanda | i'm redeploying with bifrost now, so i start from scratch... | 16:21 |
| *** kstev has joined #openstack-ansible | 16:22 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Standardize tests inventory https://review.openstack.org/399670 | 16:22 |
| yolanda | odyssey4me, my user config looks like that: http://paste.fedoraproject.org/484310/47948614 | 16:22 |
| yolanda | do you see any possible issue? | 16:22 |
| *** adrian_otto has quit IRC | 16:26 | |
| *** dxiri has quit IRC | 16:27 | |
| *** dxiri has joined #openstack-ansible | 16:27 | |
| andymccr | ocata-1 merged :D | 16:29 |
| *** dxiri_ has joined #openstack-ansible | 16:30 | |
| spotz | andymccr: woot! | 16:31 |
| *** dxiri has quit IRC | 16:32 | |
| mhayden | odyssey4me: i bumped https://review.openstack.org/399598 | 16:32 |
| andymccr | cloudnull or odyssey4me how does the repo build figure out the requirements for roles/projects - the sha bump is failing because of a pip package that ceilometer needs and isn't on the repo host. | 16:32 |
| odyssey4me | yolanda internal and external lb_vip address must be different | 16:32 |
| odyssey4me | unless you disable SSL for public endpoints | 16:32 |
| odyssey4me | andymccr it grabs them from our list, then from the project's requirements file | 16:33 |
| odyssey4me | so the workaround is to add it to our list for now, but ultimately if it's missing from their requirements then it should be added suptream | 16:34 |
| *** dxiri_ has quit IRC | 16:34 | |
| odyssey4me | *upstream | 16:34 |
| andymccr | odyssey4me: i thought it would do that, but the requirement is upstream | 16:34 |
| odyssey4me | andymccr URL? | 16:34 |
| mhayden | evrardjp: i also replied on https://review.openstack.org/397877 | 16:34 |
| andymccr | thats basically what seems to be failing, it goes to setup the ceilometer venv which fails because it requires a package that doesnt exist | 16:34 |
| yolanda | odyssey4me, so i don't have any dns resolution for that hosts, as in the example. Will it be ok to put some dummy naming, and add on /etc/hosts on the ansible bastion? | 16:34 |
| *** dxiri has joined #openstack-ansible | 16:34 | |
| andymccr | odyssey4me: https://github.com/openstack/ceilometer/blob/master/requirements.txt#L12 - we only setup python-kafka 0.9.5 | 16:35 |
| odyssey4me | yolanda you can just add another address that you bind to the same host | 16:35 |
| odyssey4me | as long as it's not the same address, otherwise you'll be trying to serve HTTP and HTTPS on the same address, which will fail, naturally | 16:35 |
| yolanda | ok i see | 16:35 |
| odyssey4me | andymccr ah, so then there's likely a global requirements issue | 16:36 |
| odyssey4me | let's dig into it | 16:36 |
| andymccr | ahh ok so global reqs override the in role ones | 16:36 |
| odyssey4me | andymccr oh nice, that requirement isn't in g-r: https://github.com/openstack/requirements/blob/master/global-requirements.txt | 16:37 |
| odyssey4me | which is why there's no wheel for it | 16:37 |
| odyssey4me | ceilometer is violating the g-r management process | 16:37 |
| andymccr | damnit ceilometer :P | 16:37 |
| andymccr | i could sha bump everything else and put ceilometer at a sha that is just before that | 16:37 |
| andymccr | so we can keep moving | 16:37 |
| odyssey4me | let's check something else here | 16:37 |
| andymccr | and then sort the ceilometer issue out separately | 16:37 |
| odyssey4me | nope - not in u-c either: https://github.com/openstack/requirements/blob/master/upper-constraints.txt | 16:38 |
| odyssey4me | yes, that's a fair plan | 16:38 |
| yolanda | odyssey4me, and in terms of network , is that fine? i just set the public ips for my hosts there | 16:38 |
| odyssey4me | then register a bug for the fact that that requirement is not in u-c | 16:38 |
| odyssey4me | yolanda I don't see anything obviously wrong at this time | 16:40 |
| odyssey4me | andymccr the last g-r update for ceilometer was https://github.com/openstack/ceilometer/commit/6f9346a22327adfc7170ffe2a74319317187bc1b#diff-b4ef698db8ca845e5845c4618278f29a | 16:41 |
| odyssey4me | that's a long time ago | 16:41 |
| odyssey4me | it's probably best to discuss what to do about all this with the requirements team | 16:41 |
| odyssey4me | after registering the bug | 16:41 |
| *** yatin_ has quit IRC | 16:41 | |
| andymccr | yeah | 16:42 |
| andymccr | bug against ceilometer im guessing | 16:43 |
| odyssey4me | I would guess so | 16:43 |
| odyssey4me | against us too, seeing as it's affecting us | 16:43 |
| odyssey4me | one bug, attached to both projects I mean | 16:43 |
| andymccr | ceilometer isnt in the list of projects that are using global requirements | 16:44 |
| *** TxGirlGeek has quit IRC | 16:45 | |
| *** TxGirlGeek has joined #openstack-ansible | 16:45 | |
| *** severion has joined #openstack-ansible | 16:46 | |
| palendae | yolanda, odyssey4me: I added https://bugs.launchpad.net/openstack-ansible/+bug/1642051 recently to do something like that. Waiting on some other reviews to get through before I add it | 16:46 |
| openstack | Launchpad bug 1642051 in openstack-ansible "Allow removal of groups via inventory-manage.py" [Undecided,New] | 16:46 |
| *** v1k0d3n has quit IRC | 16:49 | |
| *** TxGirlGeek has quit IRC | 16:50 | |
| *** TxGirlGeek has joined #openstack-ansible | 16:51 | |
| odyssey4me | palendae will that remove the group members too? yolanda was kinda hoping to have an easy way to remove all containers in one easy CLI option | 16:51 |
| palendae | odyssey4me: That's my intent; remove a group and anything in it | 16:52 |
| palendae | I think the change looks small, but I want to add tests around our existing removal implementation before I actually do it | 16:52 |
| *** victorhe has joined #openstack-ansible | 16:53 | |
| *** TxGirlGeek has quit IRC | 16:53 | |
| *** TxGirlGeek has joined #openstack-ansible | 16:54 | |
| *** agrebennikov has joined #openstack-ansible | 16:54 | |
| openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-18 https://review.openstack.org/399465 | 16:59 |
| *** TxGirlGeek has quit IRC | 17:00 | |
| *** TxGirlGeek has joined #openstack-ansible | 17:01 | |
| *** TxGirlGeek has quit IRC | 17:03 | |
| *** TxGirlGeek has joined #openstack-ansible | 17:04 | |
| *** adrian_otto has joined #openstack-ansible | 17:04 | |
| *** hughmFLEXin has joined #openstack-ansible | 17:05 | |
| *** rickflare has quit IRC | 17:07 | |
| *** aludwar has quit IRC | 17:07 | |
| *** aludwar has joined #openstack-ansible | 17:08 | |
| *** karimb has joined #openstack-ansible | 17:11 | |
| *** victorhe has quit IRC | 17:11 | |
| palendae | stevelle: Fixed https://review.openstack.org/#/c/398544/ so it has a topic now, my mistake | 17:15 |
| stevelle | cool | 17:15 |
| *** woodard has quit IRC | 17:16 | |
| stevelle | I'll be on staycation all next wk so I'll continue to tinker with inv stuff next week | 17:16 |
| palendae | Sounds like you're doing staycation wrong to me :p | 17:16 |
| stevelle | just using the time :( | 17:17 |
| palendae | :( | 17:17 |
| *** jlockwood has joined #openstack-ansible | 17:17 | |
| stevelle | I may not be following irc close but I'll keep updating these patches and if they clear send in more | 17:20 |
| palendae | Cool | 17:20 |
| yolanda | odyssey4me, redeploy worked | 17:20 |
| yolanda | seems i got it wroking, i just see a failure on cinder | 17:20 |
| odyssey4me | yolanda cinder-volume perhaps? | 17:22 |
| odyssey4me | IIRC, and I should have called it out earlier, you haven't configured any back-ends for cinder | 17:22 |
| *** victorhe has joined #openstack-ansible | 17:23 | |
| *** victorhe has quit IRC | 17:24 | |
| *** victorhe has joined #openstack-ansible | 17:24 | |
| *** haad1 has quit IRC | 17:30 | |
| openstackgerrit | Nish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts https://review.openstack.org/379138 | 17:30 |
| *** klamath has quit IRC | 17:31 | |
| *** Guest52285 is now known as mgagne | 17:33 | |
| *** mgagne has quit IRC | 17:33 | |
| *** mgagne has joined #openstack-ansible | 17:33 | |
| *** severion has quit IRC | 17:34 | |
| *** v1k0d3n has joined #openstack-ansible | 17:34 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible: Revert role SHA pin for Ocata-2 development https://review.openstack.org/399648 | 17:35 |
| *** vnogin has quit IRC | 17:38 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Standardize tests inventory https://review.openstack.org/399713 | 17:42 |
| *** vnogin has joined #openstack-ansible | 17:42 | |
| *** schwicht has joined #openstack-ansible | 17:47 | |
| *** vnogin has quit IRC | 17:51 | |
| yolanda | odyssey4me, so things are still a bit wonky.. | 17:52 |
| yolanda | TASK [lxc_container_create : Run container veth wiring script] ***************** | 17:52 |
| yolanda | fatal: [infra1_nova_scheduler_container-cec8e139]: UNREACHABLE! => {"changed": false, "msg": "All items completed", "results": [{"_ansible_item_result": true, "item": {"key": "container_address", "value": {"address": "172.30.13.124", "bridge": "br-mgmt", "interface": "eth3", "netmask": "255.255.255.192", "type": "veth"}}, "msg": "Failed to connect to the host via ssh: Shared connection to 172.30.13.90 closed.\r\n", "unreachable": true}]} | 17:52 |
| *** jperry has quit IRC | 17:57 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_barbican: Standardize task file names https://review.openstack.org/399718 | 17:57 |
| *** adrian_otto has quit IRC | 17:58 | |
| openstackgerrit | Merged openstack/openstack-ansible-tests: Add heat to the centralized tests repository https://review.openstack.org/399041 | 17:58 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_magnum: Standardize task file names https://review.openstack.org/399720 | 18:00 |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_rally: Standardize task file names https://review.openstack.org/399721 | 18:04 |
| *** asettle has quit IRC | 18:06 | |
| *** haad1 has joined #openstack-ansible | 18:06 | |
| openstackgerrit | Pedro Perez proposed openstack/openstack-ansible: Add Cloudkitty to integrated repo. https://review.openstack.org/397313 | 18:09 |
| *** adrian_otto has joined #openstack-ansible | 18:11 | |
| *** jmckind has quit IRC | 18:12 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_barbican: Standardize task file names https://review.openstack.org/399718 | 18:17 |
| *** haad1 has quit IRC | 18:18 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-os_rally: Standardize task file names https://review.openstack.org/399721 | 18:18 |
| mhayden | something i thought about -- what if we had some auditd rules that watched when openstack-related config files were changed? | 18:19 |
| mhayden | it could be valuable for some folks, and it could possibly live in the security role | 18:19 |
| mhayden | but it would be pretty osa-specific | 18:19 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Securing sysctl configurations https://review.openstack.org/397877 | 18:21 |
| openstackgerrit | Merged openstack/openstack-ansible-security: [Docs] Securing sysctl configurations https://review.openstack.org/397882 | 18:22 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Fix stig_packages_rhel7 typo https://review.openstack.org/399217 | 18:22 |
| logan- | mhayden: maybe something generic that we could inject the osa specific stuff in the integrated repo group vars? would that be possible? | 18:23 |
| mhayden | that's possible | 18:24 |
| *** haad1 has joined #openstack-ansible | 18:24 | |
| *** npawelek has quit IRC | 18:25 | |
| *** npawelek has joined #openstack-ansible | 18:25 | |
| odyssey4me | logan- ++ :) | 18:31 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_heat: Standardize tests inventory https://review.openstack.org/399016 | 18:34 |
| *** dxiri has quit IRC | 18:36 | |
| *** dxiri has joined #openstack-ansible | 18:37 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Refactor auditd rules https://review.openstack.org/397334 | 18:39 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Refactor auditd rules https://review.openstack.org/397355 | 18:39 |
| mhayden | odyssey4me / mattt: for 397334, i changed it to look like: https://review.openstack.org/gitweb?p=openstack/openstack-ansible-security.git;a=blob;f=templates/osas-auditd-rhel7.j2;h=abb5ecc01df8b1544ac44a777b96cf0b0a17df9e;hb=ff5bbe1233236ad3155d4874fe76fd165b3b98e3 | 18:40 |
| mhayden | well that link is long | 18:40 |
| mhayden | https://review.openstack.org/#/c/397334/2/templates/osas-auditd-rhel7.j2 | 18:40 |
| *** haad1 has quit IRC | 18:44 | |
| *** stuartgr has left #openstack-ansible | 18:45 | |
| *** chris_hultin is now known as chris_hultin|AWA | 18:45 | |
| *** chris_hultin|AWA is now known as chris_hultin | 18:47 | |
| *** haad1 has joined #openstack-ansible | 18:48 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_heat: Standardize tests inventory https://review.openstack.org/399016 | 18:51 |
| *** oanson has joined #openstack-ansible | 18:52 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Move common variables to common.yml https://review.openstack.org/399733 | 18:52 |
| mhayden | odyssey4me: thanks! | 18:53 |
| mhayden | mattt: https://review.openstack.org/397334 should be updated now | 18:53 |
| *** poopcat has joined #openstack-ansible | 18:54 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-tests: Add gnocchi to the centralized tests repository https://review.openstack.org/399736 | 18:54 |
| odyssey4me | I'm out for the w/end - cheers all. Have a good one! | 18:54 |
| *** weezS has quit IRC | 18:54 | |
| mhayden | odyssey4me: enjoy! | 18:55 |
| *** chris_hultin is now known as chris_hultin|AWA | 18:57 | |
| *** weezS has joined #openstack-ansible | 18:57 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-tests: Add gnocchi to the centralized tests repository https://review.openstack.org/399736 | 18:57 |
| *** haad1 has quit IRC | 19:02 | |
| *** kjw3 has quit IRC | 19:03 | |
| mattt | mhayden: cool, reading it now | 19:03 |
| mhayden | mattt: gracias :) | 19:04 |
| * mhayden is writing his first ansible module | 19:04 | |
| mattt | mhayden: what's it do? | 19:04 |
| mhayden | digging through user accounts | 19:04 |
| mhayden | going with that based on odyssey4me's suggestion | 19:04 |
| mhayden | won't require 4-5 ansible tasks + loopdeloops | 19:05 |
| *** asettle has joined #openstack-ansible | 19:08 | |
| *** schwicht has quit IRC | 19:10 | |
| *** haad1 has joined #openstack-ansible | 19:16 | |
| openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-security: Correct lineinfile option https://review.openstack.org/399740 | 19:18 |
| *** chris_hultin|AWA is now known as chris_hultin | 19:19 | |
| *** haad1 has quit IRC | 19:22 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 19:22 |
| *** javeriak has joined #openstack-ansible | 19:22 | |
| *** jbadiapa has quit IRC | 19:25 | |
| *** haad1 has joined #openstack-ansible | 19:26 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 19:27 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Move clamav packages to rhel7 vars https://review.openstack.org/399602 | 19:27 |
| mattt | mhayden: clamav ... bruh you can't be serious | 19:31 |
| mhayden | mattt: it's in the thing | 19:31 |
| mhayden | :P | 19:31 |
| *** oanson has quit IRC | 19:31 | |
| mhayden | but i disable it by default | 19:31 |
| mhayden | at least i'm not installing norton | 19:32 |
| *** haad1 has quit IRC | 19:32 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 19:33 |
| *** haad1 has joined #openstack-ansible | 19:33 | |
| mattt | mhayden: https://github.com/openstack/openstack-ansible-security/blob/master/vars/ubuntu.yml#L32 | 19:34 |
| mattt | mhayden: flipping on the rhel7 stig stuff in a functional tests fails because of that on ubuntu | 19:34 |
| mattt | mhayden: root@osas:/opt/openstack-ansible-security# ls -al /etc/init.d/clamav-daemon | 19:34 |
| mattt | (this is trusty, obviously) | 19:34 |
| mhayden | mattt: the rhel7 stig doesn't support trusty | 19:35 |
| mhayden | rhel7 stig is for xenial/centos only | 19:35 |
| mattt | sonofa | 19:35 |
| mhayden | rhel6 stig is for trusty only (when ocata is released) | 19:35 |
| mhayden | i could put an extra guard in there for that | 19:35 |
| *** klamath has joined #openstack-ansible | 19:36 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 19:36 |
| *** schwicht has joined #openstack-ansible | 19:38 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs] https://review.openstack.org/399749 | 19:40 |
| stevelle | palendae: I can't get anything to work with your consolidation of tox except chaining behind it. FYI | 19:41 |
| *** haad1 has quit IRC | 19:42 | |
| *** klamath has quit IRC | 19:43 | |
| lorid | working on OSA deployment - running openstack-ansible lxc-containers-create.yml; erroring when deployment node is trying to ssh to the containers on the other infra nodes: ssh: connect to host 10.150.243.217 port 22: No route to host / any help is appreciated. | 19:43 |
| mrhillsman | in the continuous build environment in osic, got this error - fatal: [infra01_nova_api_os_compute_container-d1a3c113]: FAILED! => {"failed": true, "msg": "Failed to get information on remote file (/usr/local/bin/lxc-veth-wiring): MODULE FAILURE"} | 19:43 |
| mrhillsman | under - TASK [lxc_container_create : Create wiring script] ***************************** | 19:43 |
| lorid | does there need to be a gateway setting in one of the config files for the containers? | 19:43 |
| openstackgerrit | Merged openstack/openstack-ansible: Revert role SHA pin for Ocata-2 development https://review.openstack.org/399648 | 19:44 |
| mrhillsman | seems to be basically copying lxc-veth-wiring.sh to /usr/local/bin/lxc-veth-wiring on the physical host container(s) live on | 19:44 |
| mrhillsman | pretty straight forward deal using copy, wondering if anyone knows if this is preventable | 19:45 |
| mrhillsman | basically the build job fails of course as a result | 19:45 |
| logan- | is it intermittent? seems like that would be caused by an ssh failure or some sort | 19:45 |
| cloudnull | ^ | 19:46 |
| logan- | of* | 19:46 |
| mrhillsman | it is the first time it has been reported, so i would say yes intermittent | 19:46 |
| lorid | not intermittent - fails while the lxc-containers-create.yml is completing and trying to ssh to each container created. | 19:46 |
| mrhillsman | though every other container either OKs or CHANGEDs | 19:46 |
| lorid | when i try cmd ssh > no route to host which typically points to route tables.... | 19:47 |
| mrhillsman | this is the first time during a build they provided this error | 19:47 |
| *** chris_hultin is now known as chris_hultin|AWA | 19:47 | |
| logan- | sorry lorid.. that reply was to mrhillsman. is that 10.150.243.217 an IP in your management cidr_networks? can you ping/ssh it from your deploy host? | 19:47 |
| mrhillsman | oh, y'all not talking to me lol | 19:47 |
| mrhillsman | oh it was ok | 19:47 |
| lorid | logan: yes it it....i am unable to ping/ssh from deploy node | 19:48 |
| logan- | lorid: the deploy host should be talking to your hosts and containers over the management network. it needs to be accessible from your deployment host | 19:49 |
| *** hughmFLEXin has quit IRC | 19:49 | |
| *** chris_hultin|AWA is now known as chris_hultin | 19:49 | |
| lorid | yes i understand - do i need to place a gateway within the /etc/network/interfaces for my br-mgmt on the deploy node? bez i do not have that info in there now | 19:49 |
| lorid | the default route is the primary nic address / not mgmt VLAN | 19:50 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Enable graphical login banner https://review.openstack.org/397246 | 19:51 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Enable graphical login banner https://review.openstack.org/397256 | 19:51 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 19:52 |
| mattt | mhayden: dunno if there's a bug due to me trying the rhel7 stig on trusty, but i had to first do rhel6 stig then rhel7 to get the auditd stuff | 19:53 |
| mattt | mhayden: i'm likely to be doing something wrong, who knows | 19:53 |
| logan- | lorid: it depends on your network layout. if you can place your deployment host inside the management network, and it all resides within the same network segment/cidr block, then there is no routing as they'll all be on the same subnet. | 19:53 |
| mhayden | yeah, tox -e func_rhel7 on trusty isn't supported, mattt | 19:54 |
| mattt | mhayden: well i just manually updated defaults/main.yml and flipped it | 19:55 |
| mhayden | flippy flippy | 19:55 |
| lorid | logan: currently have primNIC on one subnet; three other VLANs for br-mgmt/vxlan/storage all on different subnets | 19:55 |
| mhayden | many thanks for looking at those mattt :) | 19:55 |
| mattt | mhayden: np :) | 19:55 |
| openstackgerrit | Nish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts https://review.openstack.org/379138 | 19:55 |
| mhayden | whoa, my first ansible module kinda worked | 19:55 |
| *** hughmFLEXin has joined #openstack-ansible | 19:56 | |
| logan- | lorid: yes, the eth0 primary nic on the containers is a SNAT they'll use to reach external places (ie internet). the br-mgmt is where the inbound connection from your ansible box is coming. | 19:57 |
| openstackgerrit | Merged openstack/openstack-ansible-security: Refactor auditd rules https://review.openstack.org/397334 | 19:57 |
| mhayden | woot | 19:58 |
| mhayden | my patch queue is shrinking! | 19:58 |
| *** woodard has joined #openstack-ansible | 19:59 | |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 19:59 |
| openstackgerrit | Merged openstack/openstack-ansible-security: [Docs] Refactor auditd rules https://review.openstack.org/397355 | 19:59 |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 20:02 |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 20:02 |
| lorid | logan: yes - however, the deploy node is unable to resolve the subnet that the mgmt network resides on; i'm missing something (thinking gateway) within the config. Do I need to put that within the /etc/network/interfaces for all br-mgmt connections? | 20:03 |
| lorid | logan: this is my current config http://paste.openstack.org/show/589757/ | 20:04 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 20:04 |
| logan- | lorid: mind pasting your openstack_user_config? | 20:05 |
| *** electrofelix has quit IRC | 20:05 | |
| *** hughmFLEXin has quit IRC | 20:07 | |
| *** haad1 has joined #openstack-ansible | 20:08 | |
| *** hughmFLEXin has joined #openstack-ansible | 20:09 | |
| lorid | Logan: here's the user_config http://paste.openstack.org/show/589758/ | 20:09 |
| logan- | got it. and does the host you're running ansible on have an IP in 10.150.241.0/24 | 20:10 |
| lorid | yes, my deploy node is infra1 | 20:11 |
| *** haad1 has quit IRC | 20:11 | |
| openstackgerrit | Merged openstack/openstack-ansible-security: Backport of package optimization https://review.openstack.org/399598 | 20:12 |
| lorid | so the /etc/network/interface pastebin i sent was from infra1(deploy node) | 20:12 |
| *** schwicht has quit IRC | 20:12 | |
| *** schwicht has joined #openstack-ansible | 20:13 | |
| *** haad1 has joined #openstack-ansible | 20:13 | |
| logan- | inside a container if you run 'ip route list dev eno2' do you see a route for 10.150.241.0/24? | 20:13 |
| lorid | no output on that cmd | 20:14 |
| logan- | what does 'ip link' output look like | 20:14 |
| logan- | i wonder if there are some assumptions about naming the interfaces eth* in the roles | 20:15 |
| lorid | output for ip link http://paste.openstack.org/show/589759/ | 20:15 |
| lorid | i was concerned with that difference as well but thought if the config specifies the device at eno* it would not but an issue | 20:16 |
| *** dxiri has quit IRC | 20:16 | |
| *** dxiri has joined #openstack-ansible | 20:17 | |
| logan- | that's from the host.. do a 'lxc-ls -f' and then 'lxc-attach -n <some container> -- ip route; lxc-attach -n <some container> -- ip link' | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set lifetime limits for passwords [+Docs] https://review.openstack.org/399232 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Ensure passwords hashed with SHA512 [+Docs] https://review.openstack.org/399197 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Ensure libuser crypt_style is SHA512 [+Docs] https://review.openstack.org/399199 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs] https://review.openstack.org/399749 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Apply password quality rules https://review.openstack.org/399174 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Create home directories by default [+Docs] https://review.openstack.org/399759 | 20:17 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Apply password quality rules https://review.openstack.org/399186 | 20:18 |
| mhayden | yay rebasing | 20:19 |
| lorid | this is the output from a container on infra1(deploy node) http://paste.openstack.org/show/589760/ | 20:19 |
| lorid | i am unable to connect to the other containers that have been created on infra2/3 | 20:19 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Capitalize severity https://review.openstack.org/397231 | 20:19 |
| *** klamath has joined #openstack-ansible | 20:19 | |
| logan- | lorid: and you can't ping 10.150.241.213 from your deploy node? | 20:19 |
| lorid | yes but that container resides on the deploy node (infra1) | 20:20 |
| lorid | i am unable to access the containers on the other two infrastructure nodes | 20:20 |
| lorid | http://paste.openstack.org/show/589761/ | 20:21 |
| logan- | you need to attach to the container on the node it resides on | 20:22 |
| logan- | but yes-- same diagnostic commands apply there. check ip link/ip route output inside a container on infra2 | 20:22 |
| lorid | http://paste.openstack.org/show/589762/ | 20:23 |
| lorid | ok - am able to do that | 20:23 |
| logan- | oh i see | 20:24 |
| logan- | in your openstack_user_config | 20:24 |
| lorid | however, when running the cmd 'openstack-ansible lxc-containers-create.yml' it fails bez the deploynode (infra1) is attempting to ssh to the other containers | 20:24 |
| logan- | you have eno2 defined under two different network definitions | 20:24 |
| logan- | br-mgmt and also br-storage | 20:25 |
| *** hughmFLEXin has quit IRC | 20:25 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Move common variables to common.yml https://review.openstack.org/399733 | 20:26 |
| logan- | so you ended up with no management interface inside your cinder_api container, because the storage network overwrote it | 20:26 |
| logan- | set them to different interface names and see how it works :) | 20:26 |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 20:26 |
| lorid | can i fix that in the user_config and re-run the yml? or has this cached the interface information already | 20:26 |
| *** hughmFLEXin has joined #openstack-ansible | 20:27 | |
| logan- | not 100% sure. you could try it but you might end up having to wipe the containers/inventory if it doesn't work | 20:28 |
| lorid | so what should the br-storage container interface be? | 20:28 |
| openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_nova: [WIP] try to see how to run centos faster https://review.openstack.org/399744 | 20:29 |
| logan- | some unique interface name other than eth0 or the other ones you have defined there. it doesn't matter. it is only a virtual interface used inside the containers | 20:30 |
| lorid | ok thank you so much for your help. | 20:30 |
| lorid | really appreciated it :) | 20:30 |
| logan- | no problem! you might want to file a bug at bugs.launchpad.net/openstack-ansible w/ your openstack_user_config info. the inventory generation probably ought to throw an error if you have duplicate veth names defined | 20:31 |
| lorid | ok sounds good. I'll do that. | 20:31 |
| *** klamath has quit IRC | 20:34 | |
| mgariepy | mhayden, not sure about the gnocchi/ceilometer thing.. | 20:36 |
| mgariepy | ^^ https://review.openstack.org/#/c/399736 | 20:36 |
| mhayden | i thought the goal was to bring gnocchi's tests into openstack-ansible-tests -- or did i miss the point there | 20:37 |
| mgariepy | the goal is to bring tests that are used accross multiple repo into the tests repo. | 20:38 |
| mhayden | well, i guess it makes sense that gnocchi wouldn't be reused there perhaps | 20:38 |
| mgariepy | and gnocchi is in ceilometer but now I think it was testing done before gnocchi and ceilometer were different projects. | 20:39 |
| mgariepy | I could be wrong tho. | 20:40 |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Create home directories by default [+Docs] https://review.openstack.org/399759 | 20:43 |
| mgariepy | automagically, might know better | 20:43 |
| stevelle | mgariepy: gnocchi is the recommended store for ceilometer but the code there was never part of ceilometer technically | 20:43 |
| stevelle | the best way to integration test ceilometer is to store to gnocchi | 20:44 |
| stevelle | so that is why they have the nv gate | 20:44 |
| mgariepy | so putin gnocchi into tests repo make senses ? | 20:44 |
| stevelle | probably does | 20:45 |
| *** asettle has quit IRC | 20:45 | |
| mgariepy | ok. | 20:45 |
| stevelle | that is a bit of a judgement call | 20:45 |
| mgariepy | if you need the playbook in os_gnocchi and os_ceilometer then it's good. | 20:46 |
| mgariepy | should be in tests. to remove duplicate. | 20:46 |
| stevelle | it's a bit of a context switch right now for me to think about the 'best' way to do that so I'll refrain from voting right this moment :*) | 20:46 |
| mgariepy | haha ;) | 20:47 |
| stevelle | going for a walk | 20:47 |
| mgariepy | because the gate is nv on gnocchi and i never saw a ceilometer - gnocchi test pass i assumed it was an artifact. | 20:48 |
| mgariepy | i | 20:50 |
| mgariepy | i'm out have a nice weekend | 20:50 |
| spotz | seeya mgariepy | 20:55 |
| *** Mudpuppy_ has joined #openstack-ansible | 21:03 | |
| *** pperezrubio has left #openstack-ansible | 21:03 | |
| *** hughmFLEXin has quit IRC | 21:04 | |
| *** Mudpuppy has quit IRC | 21:06 | |
| *** Mudpuppy_ has quit IRC | 21:08 | |
| *** jheroux has quit IRC | 21:11 | |
| *** poopcat has quit IRC | 21:11 | |
| *** poopcat has joined #openstack-ansible | 21:11 | |
| *** poopcat has quit IRC | 21:15 | |
| *** poopcat has joined #openstack-ansible | 21:15 | |
| *** hughmFLEXin has joined #openstack-ansible | 21:16 | |
| openstackgerrit | Merged openstack/openstack-ansible: Update all SHAs for Ocata 2016-11-18 https://review.openstack.org/399465 | 21:17 |
| *** hughmFLEXin has quit IRC | 21:19 | |
| *** hughmFLEXin has joined #openstack-ansible | 21:19 | |
| lorid | logan: what is the cmd to clear the inventory all at once vs removing a host one at a time? | 21:22 |
| *** victorhe_ has joined #openstack-ansible | 21:24 | |
| *** adrian_otto has quit IRC | 21:24 | |
| *** victorhe has quit IRC | 21:27 | |
| *** victorhe has joined #openstack-ansible | 21:27 | |
| *** victorhe_ has quit IRC | 21:27 | |
| *** victorhe has quit IRC | 21:29 | |
| *** victorhe has joined #openstack-ansible | 21:29 | |
| *** victorhe has quit IRC | 21:30 | |
| *** victorhe has joined #openstack-ansible | 21:30 | |
| *** javeriak has quit IRC | 21:33 | |
| *** Jeffrey4l has quit IRC | 21:33 | |
| *** fguillot has quit IRC | 21:38 | |
| openstackgerrit | Merged openstack/openstack-ansible: Move IP logic into separate module https://review.openstack.org/392277 | 21:40 |
| *** javeriak has joined #openstack-ansible | 21:42 | |
| *** thorst_ has quit IRC | 21:46 | |
| *** schwicht has quit IRC | 21:56 | |
| *** schwicht has joined #openstack-ansible | 21:57 | |
| *** retreved has quit IRC | 21:58 | |
| *** retreved has joined #openstack-ansible | 21:59 | |
| evrardjp | I see there something urgent that needs to be doing? I see all the sha bump has been reviewed | 21:59 |
| *** schwicht has quit IRC | 21:59 | |
| *** dxiri has quit IRC | 21:59 | |
| spotz | evrardjp: https://review.openstack.org/#/c/399255/ :) | 22:01 |
| *** retreved has quit IRC | 22:03 | |
| *** asettle has joined #openstack-ansible | 22:03 | |
| *** jlockwood has quit IRC | 22:05 | |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Add IPManager class for handling IP addresses https://review.openstack.org/397299 | 22:07 |
| *** kstev has quit IRC | 22:08 | |
| evrardjp | well I don't think it's urgent but I reviewed anyway :p | 22:08 |
| evrardjp | ok I'm off then! | 22:08 |
| spotz | hehehe | 22:08 |
| openstackgerrit | Nolan Brubaker proposed openstack/openstack-ansible: Consolidate tox run output into one report https://review.openstack.org/398544 | 22:08 |
| spotz | thanks evrardjp have a goodweekend | 22:08 |
| *** jlockwood has joined #openstack-ansible | 22:10 | |
| evrardjp | you too! | 22:12 |
| *** schwicht has joined #openstack-ansible | 22:13 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs] https://review.openstack.org/399783 | 22:16 |
| *** schwicht has quit IRC | 22:25 | |
| *** schwicht has joined #openstack-ansible | 22:26 | |
| *** jamesdenton has quit IRC | 22:26 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:26 | |
| *** schwicht has quit IRC | 22:29 | |
| *** schwicht has joined #openstack-ansible | 22:29 | |
| *** adrian_otto has joined #openstack-ansible | 22:32 | |
| *** victorhe has quit IRC | 22:33 | |
| *** victorhe has joined #openstack-ansible | 22:33 | |
| *** victorhe has quit IRC | 22:37 | |
| *** victorhe has joined #openstack-ansible | 22:37 | |
| *** victorhe has quit IRC | 22:38 | |
| openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Use dynamic includes for speedup https://review.openstack.org/399790 | 22:38 |
| *** victorhe has joined #openstack-ansible | 22:39 | |
| mhayden | have a good weekend and next week, folks | 22:41 |
| mhayden | i'll be back on 2016-11-28! | 22:41 |
| *** schwicht has quit IRC | 22:42 | |
| *** victorhe has quit IRC | 22:42 | |
| openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Implement zero downtime upgrades https://review.openstack.org/384269 | 22:43 |
| *** smatzek has quit IRC | 22:47 | |
| *** spotz is now known as spotz_zzz | 22:47 | |
| *** victorhe has joined #openstack-ansible | 22:48 | |
| *** weezS has quit IRC | 22:49 | |
| *** victorhe_ has joined #openstack-ansible | 22:50 | |
| *** vnogin has joined #openstack-ansible | 22:52 | |
| *** victorhe has quit IRC | 22:52 | |
| *** spotz_zzz is now known as spotz | 22:55 | |
| *** victorhe_ has quit IRC | 22:55 | |
| *** vnogin has quit IRC | 22:56 | |
| *** spotz is now known as spotz_zzz | 23:02 | |
| *** retreved has joined #openstack-ansible | 23:19 | |
| *** retreved_ has joined #openstack-ansible | 23:25 | |
| *** retreved has quit IRC | 23:25 | |
| *** javeriak has quit IRC | 23:28 | |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: DynamicInventory filesystem storage API cleanup https://review.openstack.org/399303 | 23:30 |
| openstackgerrit | Steve Lewis (stevelle) proposed openstack/openstack-ansible: Inventory generation: write hosts file refactor https://review.openstack.org/399363 | 23:30 |
| *** Jeffrey4l has joined #openstack-ansible | 23:31 | |
| *** javeriak has joined #openstack-ansible | 23:37 | |
| *** TxGirlGeek has quit IRC | 23:42 | |
| *** haad1 has quit IRC | 23:46 | |
| *** schwicht has joined #openstack-ansible | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!