*** hughmFLEXin has quit IRC | 00:01 | |
*** javeriak has joined #openstack-ansible | 00:02 | |
*** ianychoi has joined #openstack-ansible | 00:02 | |
*** TxGirlGeek has quit IRC | 00:02 | |
*** cathrichardson has quit IRC | 00:03 | |
*** hughmFLEXin has joined #openstack-ansible | 00:03 | |
*** cathrichardson has joined #openstack-ansible | 00:04 | |
*** galstrom is now known as galstrom_zzz | 00:05 | |
*** dffco has quit IRC | 00:06 | |
*** kristian__ has joined #openstack-ansible | 00:11 | |
*** kristian__ has quit IRC | 00:15 | |
*** javeriak has quit IRC | 00:20 | |
cloudnull | TobiSan: hard to say whats going on. | 00:21 |
---|---|---|
cloudnull | have you ifup/down the bridges ? | 00:21 |
cloudnull | prior to this going sideways? | 00:21 |
cloudnull | there is a tool called lxc-veth-check which can repair the links between containers and bridges should those links be broken | 00:22 |
cloudnull | if you run lxc-veth-check it should go through and verify that all containers on a given host are wired up correctly. | 00:23 |
cloudnull | also in the container check to see if the interface file is still propulated with data. | 00:24 |
cloudnull | something like /etc/network/interfaces.d/eth1.cfg | 00:24 |
cloudnull | if that file no longer exists or is bad that could be part of the problem | 00:24 |
cloudnull | TobiSan: lastly check that the source or include line is in the /etc/network/interfaces file | 00:25 |
cloudnull | you should see something like source /etc/network/interfaces.d/*.cfg | 00:25 |
*** javeriak has joined #openstack-ansible | 00:25 | |
*** javeriak has quit IRC | 00:25 | |
*** javeriak has joined #openstack-ansible | 00:26 | |
*** Mudpuppy has joined #openstack-ansible | 00:26 | |
*** javeriak has quit IRC | 00:26 | |
*** thorst_ has joined #openstack-ansible | 00:26 | |
*** thorst_ has quit IRC | 00:27 | |
*** pramod has joined #openstack-ansible | 00:28 | |
*** hfu has joined #openstack-ansible | 00:30 | |
*** kylek3h has joined #openstack-ansible | 00:31 | |
*** weezS has joined #openstack-ansible | 00:32 | |
*** haad1 has quit IRC | 00:32 | |
*** dxiri has quit IRC | 00:34 | |
*** weezS has quit IRC | 00:37 | |
*** whiteveil has quit IRC | 00:38 | |
*** cathrich_ has joined #openstack-ansible | 00:42 | |
*** cathrichardson has quit IRC | 00:42 | |
*** Pramod_ has joined #openstack-ansible | 00:42 | |
*** pramod has quit IRC | 00:45 | |
*** whiteveil has joined #openstack-ansible | 00:45 | |
*** cmart has quit IRC | 00:53 | |
*** Mudpuppy_ has joined #openstack-ansible | 00:54 | |
*** Mudpuppy has quit IRC | 00:57 | |
openstackgerrit | Jirayut Nimsaeng proposed openstack/openstack-ansible-os_neutron: Separate VPNaaS package and configuration between Ubuntu 14.04 that is openswan and Ubuntu 16.04 that is strongswan https://review.openstack.org/403822 | 00:58 |
*** vnogin has quit IRC | 01:01 | |
*** schwicht has quit IRC | 01:10 | |
*** Mudpuppy_ has quit IRC | 01:24 | |
*** schwicht has joined #openstack-ansible | 01:25 | |
*** vnogin has joined #openstack-ansible | 01:25 | |
*** askb has quit IRC | 01:32 | |
*** thorst_ has joined #openstack-ansible | 01:35 | |
*** thorst_ has quit IRC | 01:41 | |
*** askb has joined #openstack-ansible | 01:44 | |
*** askb has quit IRC | 01:52 | |
*** sdake_ has joined #openstack-ansible | 01:55 | |
*** sdake_ has joined #openstack-ansible | 01:55 | |
*** cathrich_ has quit IRC | 01:56 | |
*** sdake has quit IRC | 01:58 | |
*** cathrichardson has joined #openstack-ansible | 01:58 | |
*** dffco has joined #openstack-ansible | 01:59 | |
*** skape_ has quit IRC | 02:02 | |
*** cathrichardson has quit IRC | 02:03 | |
*** schwicht has quit IRC | 02:07 | |
*** vnogin has quit IRC | 02:10 | |
*** whiteveil has quit IRC | 02:10 | |
openstackgerrit | Michael Carden proposed openstack/openstack-ansible-os_designate: Update Vagrant config with Xenial https://review.openstack.org/403974 | 02:11 |
*** cathrichardson has joined #openstack-ansible | 02:11 | |
*** dffco has quit IRC | 02:28 | |
*** cathrichardson has quit IRC | 02:32 | |
*** galstrom_zzz is now known as galstrom | 02:34 | |
*** thorst_ has joined #openstack-ansible | 02:39 | |
*** thorst_ has quit IRC | 02:40 | |
*** thorst_ has joined #openstack-ansible | 02:40 | |
*** thorst_ has quit IRC | 02:41 | |
openstackgerrit | Michael Carden proposed openstack/openstack-ansible: Create Designate container and start services https://review.openstack.org/403983 | 02:43 |
*** oanson has joined #openstack-ansible | 03:07 | |
*** thorst_ has joined #openstack-ansible | 03:08 | |
*** dffco has joined #openstack-ansible | 03:12 | |
*** v1k0d3n has joined #openstack-ansible | 03:15 | |
*** thorst_ has quit IRC | 03:16 | |
*** woodard has quit IRC | 03:18 | |
*** woodard has joined #openstack-ansible | 03:18 | |
*** dffco has quit IRC | 03:24 | |
*** Jeffrey4l has quit IRC | 03:54 | |
*** Jeffrey4l has joined #openstack-ansible | 03:55 | |
*** f13o has quit IRC | 04:05 | |
*** galstrom is now known as galstrom_zzz | 04:07 | |
*** thorst_ has joined #openstack-ansible | 04:14 | |
*** thorst_ has quit IRC | 04:22 | |
*** chhavi has joined #openstack-ansible | 04:22 | |
*** whiteveil has joined #openstack-ansible | 04:27 | |
*** oanson has quit IRC | 04:30 | |
*** whiteveil has quit IRC | 04:34 | |
*** weezS has joined #openstack-ansible | 05:02 | |
*** poopcat has quit IRC | 05:05 | |
*** dxiri has joined #openstack-ansible | 05:05 | |
*** dxiri has quit IRC | 05:10 | |
*** Jack_Iv has joined #openstack-ansible | 05:12 | |
*** gouthamr has joined #openstack-ansible | 05:12 | |
*** kristian__ has joined #openstack-ansible | 05:13 | |
*** Jack_Iv has quit IRC | 05:17 | |
*** kristian__ has quit IRC | 05:17 | |
*** thorst_ has joined #openstack-ansible | 05:20 | |
*** thorst_ has quit IRC | 05:26 | |
*** shausy has joined #openstack-ansible | 05:35 | |
*** Jack_Iv has joined #openstack-ansible | 05:37 | |
*** gouthamr has quit IRC | 05:37 | |
*** chhavi has quit IRC | 05:42 | |
*** gouthamr has joined #openstack-ansible | 05:47 | |
*** hybridpollo has quit IRC | 05:49 | |
*** sdake_ has quit IRC | 05:52 | |
*** williamcaban has joined #openstack-ansible | 05:54 | |
*** javeriak has joined #openstack-ansible | 05:56 | |
*** gouthamr has quit IRC | 05:56 | |
*** chhavi has joined #openstack-ansible | 05:56 | |
*** javeriak has quit IRC | 05:57 | |
*** javeriak has joined #openstack-ansible | 05:57 | |
*** gtrxcb has joined #openstack-ansible | 05:58 | |
*** Jeffrey4l has quit IRC | 06:12 | |
*** Jeffrey4l has joined #openstack-ansible | 06:12 | |
*** thorst_ has joined #openstack-ansible | 06:25 | |
*** rgogunskiy has joined #openstack-ansible | 06:26 | |
*** McMurlock1 has joined #openstack-ansible | 06:30 | |
*** thorst_ has quit IRC | 06:32 | |
*** oanson has joined #openstack-ansible | 06:41 | |
*** kristian__ has joined #openstack-ansible | 06:42 | |
*** fxpester has joined #openstack-ansible | 06:45 | |
*** kristian__ has quit IRC | 06:52 | |
*** h5t4 has joined #openstack-ansible | 07:00 | |
*** Pramod_ has quit IRC | 07:02 | |
*** chhavi has quit IRC | 07:03 | |
*** chhavi has joined #openstack-ansible | 07:06 | |
*** kristian__ has joined #openstack-ansible | 07:13 | |
*** drifterza has joined #openstack-ansible | 07:20 | |
*** pcaruana has joined #openstack-ansible | 07:21 | |
*** f13o has joined #openstack-ansible | 07:25 | |
*** chhavi has quit IRC | 07:28 | |
*** thorst_ has joined #openstack-ansible | 07:28 | |
*** javeriak has quit IRC | 07:32 | |
*** Jack_Iv_ has joined #openstack-ansible | 07:34 | |
*** thorst_ has quit IRC | 07:36 | |
*** kristian__ has quit IRC | 07:38 | |
drifterza | Hello | 07:38 |
*** javeriak has joined #openstack-ansible | 07:39 | |
*** kristian__ has joined #openstack-ansible | 07:40 | |
*** weezS has quit IRC | 07:40 | |
*** javeriak has quit IRC | 07:43 | |
*** kristian__ has quit IRC | 07:44 | |
*** fxpester has quit IRC | 07:50 | |
*** javeriak has joined #openstack-ansible | 07:55 | |
*** f13o has quit IRC | 08:03 | |
*** gouthamr has joined #openstack-ansible | 08:03 | |
*** fxpester has joined #openstack-ansible | 08:23 | |
*** javeriak has quit IRC | 08:23 | |
*** yolanda has quit IRC | 08:31 | |
*** haad1 has joined #openstack-ansible | 08:31 | |
*** thorst_ has joined #openstack-ansible | 08:34 | |
*** thorst_ has quit IRC | 08:41 | |
*** Andrew_jedi has joined #openstack-ansible | 08:42 | |
Andrew_jedi | Hello Folks, Does anyone know whether glance-replicator still works? | 08:42 |
*** yolanda has joined #openstack-ansible | 08:43 | |
*** gtrxcb has quit IRC | 08:49 | |
*** pmannidi has quit IRC | 09:00 | |
odyssey4me | mongo3 that file will be on the repo server once the repo is built | 09:03 |
odyssey4me | it has a fall back to an upstream URL | 09:03 |
openstackgerrit | Merged openstack/openstack-ansible-galera_client: Allow galera_client role to skip package installs https://review.openstack.org/403880 | 09:10 |
*** haad1 has quit IRC | 09:12 | |
*** vnogin has joined #openstack-ansible | 09:16 | |
*** chhavi has joined #openstack-ansible | 09:18 | |
*** kristian__ has joined #openstack-ansible | 09:29 | |
openstackgerrit | Merged openstack/openstack-ansible-galera_server: Don't install client packages via the galera_client role https://review.openstack.org/403881 | 09:36 |
odyssey4me | andymccr ^ you'll notice that no trusty job ran for ^ | 09:37 |
andymccr | odyssey4me: for galera_server? that was already working - its only like swift/neutron where there were trusty-nv jobs that would run. i'll check if those are working now! | 09:38 |
odyssey4me | andymccr ok, just verified that the integrated gate is now working right for master & stable/newton | 09:38 |
andymccr | ahh perfect | 09:38 |
andymccr | im gonna start removing the trusty stuff at some point then | 09:38 |
odyssey4me | check the zuul queue now for the two test jobs | 09:39 |
andymccr | or at least filing bugs to do that :P | 09:39 |
andymccr | looks like it's working for neutron too | 09:39 |
*** thorst_ has joined #openstack-ansible | 09:39 | |
andymccr | so i think that's fixed now | 09:39 |
*** hfu has quit IRC | 09:42 | |
*** kristian__ has quit IRC | 09:44 | |
*** kristian__ has joined #openstack-ansible | 09:44 | |
*** kristian__ has quit IRC | 09:45 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server https://review.openstack.org/401123 | 09:46 |
*** kristian__ has joined #openstack-ansible | 09:46 | |
*** thorst_ has quit IRC | 09:47 | |
evrardjp | odyssey4me: do you know the rationale behind having uca optional in xenial? | 09:47 |
odyssey4me | evrardjp it's optional across the board - that was intended for newton just to allow people to turn it off if they want | 09:47 |
*** kristia__ has joined #openstack-ansible | 09:47 | |
evrardjp | (master) | 09:47 |
odyssey4me | if we think it's important to force it on, then we could switch to doing that this cycle | 09:48 |
odyssey4me | it probably makes sense to force RDO for centos and UCA for ubuntu | 09:48 |
*** openstackgerrit has quit IRC | 09:48 | |
evrardjp | exactly | 09:48 |
evrardjp | I thought it was easier to have a package: task for the requirements that setups the repo, uca in ubuntu/rdo on rh | 09:49 |
*** openstackgerrit has joined #openstack-ansible | 09:49 | |
odyssey4me | oh, good idea :) | 09:49 |
odyssey4me | hmm, is there a package to install for ubuntu though? | 09:49 |
odyssey4me | IIRC you add the keyring package, then have to execute a command | 09:50 |
evrardjp | oh yes that's true | 09:51 |
evrardjp | that still works though | 09:51 |
*** Jack_Iv_ has quit IRC | 09:51 | |
*** kristian__ has quit IRC | 09:51 | |
odyssey4me | yeah, but it doesn't consolidate it down to a single task unfortunately :/ | 09:51 |
evrardjp | apt: update_cache [ubuntu only], then package: item where item is different in centos[rdo]/ubuntu[uca keyring], apt_repo, then generic pkg install | 09:52 |
odyssey4me | evrardjp so with regard to https://review.openstack.org/400579 the reason that the approach is taken is because the repo may or may not exist when the first few playbooks run | 09:53 |
evrardjp | too bad ubuntu needs update_cache and apt_repo | 09:53 |
evrardjp | odyssey4me: agreed, but it doesn't matter? | 09:53 |
evrardjp | you still have your fallback url | 09:53 |
odyssey4me | sure, but then you lose one more fallback | 09:54 |
odyssey4me | right now there are two, and that task often fails | 09:54 |
odyssey4me | my intent is to protect the two fallback system, but provide for using the local repo if need back | 09:54 |
odyssey4me | *is possible | 09:54 |
*** yolanda has quit IRC | 09:55 | |
*** electrofelix has joined #openstack-ansible | 09:55 | |
evrardjp | it looks like we are doing the wiring to override group_vars, which seems wrong to me. If we are at that point, maybe we should rethink the way we are doing things | 09:55 |
odyssey4me | I don't understand the objection. A play can override group_vars, that's why there is a var precedence to use as a tool. | 09:56 |
odyssey4me | we already do this for upper constraints | 09:56 |
odyssey4me | it implements exactly the same mechanism | 09:56 |
*** yolanda has joined #openstack-ansible | 09:57 | |
evrardjp | it's not because it's not technically feasible, I know it would work | 09:57 |
evrardjp | it's because I don't think we should head that way | 09:57 |
odyssey4me | evrardjp if your objection is the approach taken, then feel free to push a patch with an alternative approach so that it can be debated in review | 09:58 |
odyssey4me | but blocking a functional patch just for the sake of approach with no real alternative on the table is not productive | 09:58 |
odyssey4me | with your -2 you're actually preventing anyone else from reviewing the patch | 09:59 |
odyssey4me | and therefore there can be no discussion about approach | 09:59 |
evrardjp | ok let me do a quick commit then | 10:00 |
openstackgerrit | Merged openstack/openstack-ansible-os_cloudkitty: Clean up unused vars https://review.openstack.org/401405 | 10:00 |
*** Jack_Iv_ has joined #openstack-ansible | 10:02 | |
openstackgerrit | Jean-Philippe Evrard proposed openstack/openstack-ansible: Use get-pip script from repo release folder https://review.openstack.org/404125 | 10:15 |
*** kristian__ has joined #openstack-ansible | 10:20 | |
*** kristia__ has quit IRC | 10:23 | |
openstackgerrit | Merged openstack/openstack-ansible-os_glance: Detach glance swift_store_auth_insecure from Keystone https://review.openstack.org/402393 | 10:27 |
*** aludwar has quit IRC | 10:27 | |
*** kristian__ has quit IRC | 10:27 | |
*** aludwar has joined #openstack-ansible | 10:28 | |
TobiSan | cloudnull: i killed the service dnsmasq i have started before, then ifdown and ifup lxcbr0 and afterwards there was actually a dnsmasq process. after this the lxc-veth-check resolved all broken veths | 10:28 |
TobiSan | but unfortunately i still cant ping the containers from the host | 10:29 |
TobiSan | "Destination Host Unreachable" | 10:30 |
*** kristian__ has joined #openstack-ansible | 10:31 | |
TobiSan | the containers still do not have a ipv4 address but after attaching and ifdown ifup their interfaces they get one ipv4 | 10:32 |
*** kristia__ has joined #openstack-ansible | 10:34 | |
*** kristian__ has quit IRC | 10:34 | |
openstackgerrit | Merged openstack/openstack-ansible-os_keystone: Fix virtualenv-tools issue https://review.openstack.org/402212 | 10:36 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Set lifetime limits for passwords [+Docs] https://review.openstack.org/399232 | 10:41 |
*** Jack_Iv_ has quit IRC | 10:42 | |
*** thorst_ has joined #openstack-ansible | 10:45 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Create home directories by default [+Docs] https://review.openstack.org/399759 | 10:45 |
*** kristian__ has joined #openstack-ansible | 10:47 | |
*** kristia__ has quit IRC | 10:47 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs] https://review.openstack.org/399783 | 10:48 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs] https://review.openstack.org/399749 | 10:48 |
*** kristian__ has quit IRC | 10:49 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Create home directories by default [+Docs] https://review.openstack.org/399759 | 10:49 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs] https://review.openstack.org/399783 | 10:49 |
TobiSan | restarting networking service results in an "failed to bring up br-mgmt" error | 10:50 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 10:50 |
asettle | andymccr: where yo at? I can't see your head and I need you to do a thing | 10:51 |
*** thorst_ has quit IRC | 10:51 | |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-security: Require auth for sudo [+Docs] https://review.openstack.org/403807 | 10:52 |
asettle | andymccr: https://review.openstack.org/#/c/391486/ | 10:52 |
openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Fix virtualenv-tools issue https://review.openstack.org/403688 | 10:56 |
*** haad1 has joined #openstack-ansible | 10:57 | |
*** gouthamr has quit IRC | 10:58 | |
openstackgerrit | Andy McCrae proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/404150 | 11:03 |
TobiSan | cloudnull: i have fixed it. the issue was a second gateway declaration in the interfaces file. this caused a failing ifup on br-mgmt | 11:03 |
asettle | Thank you andymccr | 11:03 |
andymccr | not sure why that didnt cherrypick cleanly via the interface... but oh well | 11:03 |
openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/404150 | 11:03 |
asettle | andymccr: does what wants? | 11:03 |
asettle | I've given it a +2, i'll wait until jenkins loves it | 11:04 |
andymccr | should be quick, its a docs only change! | 11:04 |
*** kristian__ has joined #openstack-ansible | 11:05 | |
*** kristian__ has quit IRC | 11:06 | |
*** Andrew_jedi has quit IRC | 11:08 | |
odyssey4me | andymccr asettle https://review.openstack.org/#/c/404150/2 needs an edit | 11:08 |
asettle | odyssey4me: got it | 11:08 |
openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/404150 | 11:09 |
asettle | eGood catch | 11:09 |
odyssey4me | and I'm not entirely sure that a cherry-pick is the right approach there - the conflicts may be due to edits in master which were not backported | 11:09 |
odyssey4me | but I'm not sure what that might be - you'd have to check the conflcts | 11:09 |
asettle | odyssey4me: yeah, I figure we'll wait and see tbh. | 11:10 |
*** fxpester has quit IRC | 11:10 | |
odyssey4me | oh, you know what has changed - the advanced config stuff, for new roles in ocata | 11:10 |
odyssey4me | so best to ensure that we don't port those back to newton | 11:11 |
odyssey4me | andymccr asettle also, this would need to change: https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L3286 | 11:12 |
asettle | odyssey4me: hold tight, please. Andreas and I are still working out the creation of this. We will get there :) i'm in the process of creating the index files for newton and ocata and I asked Andy to do the backport while I did this. | 11:12 |
asettle | odyssey4me: if you wanna go ahead and update that to make it smoother, that would be awesome :) | 11:13 |
odyssey4me | well, right now the deploy guide job won't run with that patch - so I'm not entirely sure what the purpose would be? | 11:13 |
*** kristian__ has joined #openstack-ansible | 11:15 | |
asettle | odyssey4me: this is a new process, it is not appropriately documented how to do this and I am slowly figuring it out. I have -1 on the workflow so people note this is a work in progress. | 11:15 |
asettle | Please be patient. | 11:15 |
asettle | I'm learning. | 11:15 |
odyssey4me | asettle ah ok :) I was just pointing out some of the moving parts I saw - not trying to rush anything. | 11:15 |
odyssey4me | Also, I checked the appendices and don't see any master content there, so I think we're ok. | 11:16 |
asettle | Appreciated :) i've got a list in front of me that I'll hopefully be able to smooth out along the way. | 11:16 |
odyssey4me | I take it that the intent is to publish the Newton guide to the docs front page? | 11:16 |
asettle | odyssey4me: sure is. | 11:16 |
odyssey4me | woot! | 11:16 |
asettle | Making the index pages for the draft (ocata) and newton repos now. | 11:16 |
asettle | Hence why i'm just taking it slow. | 11:17 |
asettle | Good to hear we're okay :) | 11:17 |
asettle | Thanks for checking. | 11:17 |
*** kristia__ has joined #openstack-ansible | 11:17 | |
odyssey4me | ok cool, looking forward to it | 11:17 |
asettle | Me too! | 11:17 |
asettle | :D | 11:17 |
odyssey4me | if you need some help from me, just ping me | 11:17 |
asettle | Tahnks odyssey4me I most definitely will hahaha | 11:17 |
*** kristian__ has quit IRC | 11:18 | |
*** kristia__ has quit IRC | 11:21 | |
*** kristian__ has joined #openstack-ansible | 11:22 | |
*** kristian__ has quit IRC | 11:22 | |
*** chhavi has quit IRC | 11:25 | |
*** chhavi has joined #openstack-ansible | 11:27 | |
*** hfu has joined #openstack-ansible | 11:28 | |
*** stuartgr has joined #openstack-ansible | 11:29 | |
asettle | odyssey4me: https://review.openstack.org/#/c/404162/ please review, haha | 11:30 |
*** hfu has quit IRC | 11:30 | |
asettle | andymccr: & | 11:30 |
asettle | ^ | 11:30 |
asettle | oh ffs don't | 11:31 |
asettle | it didn't save my changes | 11:31 |
odyssey4me | okie dokey, I've starred it | 11:32 |
asettle | Cheers :) | 11:34 |
asettle | Ah! Yay! Jenkins was happy with the backport. | 11:34 |
odyssey4me | also yay, jenkins didn't do a functional build for that change, so the filter adjustment is working :) | 11:37 |
odyssey4me | andymccr we'll need a tie breaker for https://review.openstack.org/404125 & https://review.openstack.org/400579 | 11:39 |
asettle | odyssey4me: the layout.yaml - why does that require updates? | 11:40 |
andymccr | i'll click +2/+w on both and whichever merges first wins?! | 11:41 |
andymccr | asettle: cos its skipping the deploy-guide build at the moment afaik | 11:42 |
andymccr | for branches < newton | 11:42 |
asettle | ohhhhh | 11:42 |
asettle | I need to learn to read yaml | 11:42 |
asettle | Rokay | 11:42 |
andymccr | asettle: that file is hard to read... | 11:42 |
asettle | So what *should* it read? | 11:42 |
*** Jack_Iv_ has joined #openstack-ansible | 11:42 | |
odyssey4me | asettle yeah, the 'newton' part needs to be removed | 11:42 |
asettle | Just skip mitaka | 11:42 |
asettle | ON IT | 11:42 |
odyssey4me | it should read ^(?!(liberty|stable/mitaka)).*$ | 11:43 |
andymccr | https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L2525-L2526 - im guessing thats the line | 11:43 |
odyssey4me | that's regex :) | 11:43 |
andymccr | oh wait there is the one above that too: https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L2504-L2507 | 11:44 |
odyssey4me | oh yes, and that part too | 11:44 |
asettle | Okay, I think I got that rigt | 11:44 |
asettle | ohhhh lame | 11:44 |
asettle | How many of these did I make | 11:44 |
andymccr | just edit line 2525 and line 2507 of the 18254 lines. | 11:45 |
asettle | So noe line 3286? | 11:45 |
asettle | not* | 11:45 |
odyssey4me | I might be wrong, but I think that L2526, https://github.com/openstack-infra/project-config/blob/master/zuul/layout.yaml#L3286 is unnecessary | 11:45 |
andymccr | oh 3286 as well | 11:45 |
asettle | Okay cool | 11:46 |
andymccr | there seems to be duplication there though... | 11:46 |
odyssey4me | yeah, I think 3284-3286 is not necessary | 11:46 |
odyssey4me | that should be removed | 11:46 |
andymccr | might be best to change it for now and we can do a cleanup later? | 11:46 |
asettle | So we have | 11:46 |
asettle | On 2507 | 11:46 |
asettle | branch: ^(?!stable/(mitaka)).*$ | 11:46 |
asettle | 2526 - branch: ^(?!stable/(mitaka)).*$ | 11:47 |
*** Jack_Iv_ has quit IRC | 11:47 | |
odyssey4me | asettle I think we may need to have branch: ^(?!stable/mitaka).*$ | 11:48 |
andymccr | you can just do ^(?!stable/mitaka).*$ since its just one branch now | 11:48 |
odyssey4me | ie do not run it for the mitaka branch | 11:48 |
asettle | Awwwww | 11:48 |
asettle | I jut pushed it | 11:48 |
drifterza | Hello Peep! | 11:48 |
drifterza | Peeps! | 11:48 |
odyssey4me | then for openstack-ansible specifically we'll also need to exclude the liberty branch | 11:48 |
asettle | Morning drifterza | 11:48 |
asettle | odyssey4me andymccr - https://review.openstack.org/#/c/404170/ | 11:48 |
odyssey4me | I think perhaps L2526 should exclude stable/liberty too | 11:48 |
odyssey4me | ok, will comment in the review | 11:48 |
asettle | odyssey4me: update away, I am so lost rn | 11:48 |
odyssey4me | ok, lemme update | 11:49 |
*** thorst_ has joined #openstack-ansible | 11:49 | |
odyssey4me | andymccr asettle updated | 11:51 |
asettle | odyssey4me: cheers :) | 11:51 |
asettle | Oh I see waht you did! Good good :) | 11:52 |
asettle | Makes sense. | 11:52 |
asettle | I'm trying to base a lot of these changes off what they did for the install guide but they had someone else who had a lot more html knowledge than I do this. I haven't done HTML in years. | 11:52 |
asettle | Thanks for helping andymccr and odyssey4me | 11:52 |
asettle | Can you guys think of anything else I'll need to do? | 11:52 |
odyssey4me | for now, I did comment on the HTML bits | 11:53 |
odyssey4me | ie https://review.openstack.org/404162 | 11:53 |
odyssey4me | I'm not sure where the published location is | 11:53 |
asettle | Yeah Andreas just commented as I updated :) you were right | 11:54 |
*** thorst_ has quit IRC | 11:57 | |
openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/404150 | 11:58 |
*** smatzek has joined #openstack-ansible | 12:00 | |
*** hughmFLEXin has quit IRC | 12:03 | |
*** hughmFLEXin has joined #openstack-ansible | 12:05 | |
*** sdake has joined #openstack-ansible | 12:09 | |
*** kristian__ has joined #openstack-ansible | 12:12 | |
*** kristian__ has quit IRC | 12:14 | |
*** kristian__ has joined #openstack-ansible | 12:14 | |
*** kristia__ has joined #openstack-ansible | 12:15 | |
*** hfu has joined #openstack-ansible | 12:17 | |
*** hfu has quit IRC | 12:17 | |
*** kristian__ has quit IRC | 12:19 | |
*** kristia__ has quit IRC | 12:21 | |
*** kristian__ has joined #openstack-ansible | 12:36 | |
*** retreved has joined #openstack-ansible | 12:36 | |
*** gouthamr has joined #openstack-ansible | 12:42 | |
*** Jack_Iv_ has joined #openstack-ansible | 12:44 | |
*** Matias has quit IRC | 12:45 | |
*** Jack_Iv_ has quit IRC | 12:48 | |
*** thorst_ has joined #openstack-ansible | 12:49 | |
*** BjoernT has joined #openstack-ansible | 12:52 | |
*** hfu has joined #openstack-ansible | 12:55 | |
*** Matias has joined #openstack-ansible | 12:56 | |
*** kristian__ has quit IRC | 13:00 | |
*** johnmilton has joined #openstack-ansible | 13:01 | |
*** chhavi has quit IRC | 13:02 | |
mhayden | asettle: i like cookies | 13:07 |
mgariepy | good morning everyone | 13:17 |
*** vnogin has quit IRC | 13:18 | |
asettle | mhayden: yesssss | 13:19 |
andymccr | morning mhayden the octavia repo is ready now! | 13:23 |
mhayden | andymccr: woot | 13:23 |
mhayden | it's on my list of to-do's | 13:23 |
andymccr | so im working on that default base-role atm - it didnt get imported so its blank, but you could try it and give feedback if youre interested | 13:24 |
*** chhavi has joined #openstack-ansible | 13:30 | |
drifterza | where is the evrardjp | 13:36 |
evrardjp | here | 13:36 |
drifterza | How you doing man ? | 13:36 |
evrardjp | back from a few days off! | 13:36 |
*** kristian__ has joined #openstack-ansible | 13:36 | |
drifterza | Yeah it was quiet in here damn! | 13:36 |
drifterza | good rest though ? | 13:37 |
asettle | It was quiet here | 13:37 |
asettle | uhh I mean the office | 13:37 |
evrardjp | asettle: like I'm the most turbulent :p | 13:37 |
asettle | I am like a calm lake, evrardjp | 13:37 |
asettle | So peaceful. | 13:37 |
asettle | evrardjp: you doing bug triage? | 13:37 |
drifterza | evrardjp, did you go anywhere ? or did you just chill at home. | 13:38 |
evrardjp | asettle: yes, the page is ready | 13:39 |
*** Jack_Iv has quit IRC | 13:39 | |
evrardjp | drifterza: enjoyed the black friday by buying useless things, and using them until I'm too tired ;D | 13:39 |
*** Jack_Iv has joined #openstack-ansible | 13:40 | |
*** vnogin has joined #openstack-ansible | 13:40 | |
asettle | evrardjp: woah phrasing | 13:41 |
evrardjp | and went to Winter Wonderland! | 13:41 |
*** kristian__ has quit IRC | 13:41 | |
asettle | OMG HOW WAS IT | 13:41 |
evrardjp | great | 13:41 |
evrardjp | I'll go again | 13:41 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache https://review.openstack.org/404219 | 13:41 |
drifterza | Whats winter wonderland | 13:42 |
evrardjp | this time I'll be better prepared to see the ice exposition! | 13:42 |
evrardjp | drifterza: theme park winter themed in hyde park in central london | 13:42 |
evrardjp | with additional ice skating, ice things, and all this kind of things! | 13:42 |
drifterza | oooh | 13:42 |
drifterza | okay | 13:43 |
evrardjp | mulled alcoholic beverages | 13:43 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache https://review.openstack.org/404219 | 13:43 |
evrardjp | fun stuff | 13:43 |
drifterza | sounds like it | 13:43 |
*** fguillot has joined #openstack-ansible | 13:43 | |
*** hfu has quit IRC | 13:45 | |
openstackgerrit | Alexandra Settle proposed openstack/openstack-ansible: [DOCS] Edits to the upgrade guide https://review.openstack.org/403646 | 13:46 |
mgariepy | can 2 core check those please ? https://review.openstack.org/#/c/403696/ https://review.openstack.org/#/c/403701/ | 13:47 |
odyssey4me | logan- so you got https://review.openstack.org/400338 tested then :) does that open up some new options for you? | 13:47 |
mgariepy | can a core check those 2 i meant. | 13:48 |
mgariepy | can be the same for both haha | 13:48 |
asettle | hahahha mhayden | 13:49 |
asettle | mgariepy: | 13:49 |
asettle | dangit | 13:49 |
asettle | my tab complete is terrible | 13:49 |
asettle | sorry mhayden | 13:49 |
openstackgerrit | Flávio Ramalho proposed openstack/openstack-ansible-os_ironic: Adds support for the ironic-oneview drivers. https://review.openstack.org/400241 | 13:49 |
*** woodard has quit IRC | 13:50 | |
*** woodard has joined #openstack-ansible | 13:50 | |
*** kristian__ has joined #openstack-ansible | 13:50 | |
*** h5t4 has quit IRC | 13:52 | |
*** thorst_ has quit IRC | 13:54 | |
logan- | odyssey4me: it should come in handy for doing guest image builds remotely | 13:54 |
*** thorst_ has joined #openstack-ansible | 13:54 | |
odyssey4me | logan- yeah, my intent is to use it to prep container caches as part of the build process | 13:56 |
odyssey4me | role-based caches | 13:56 |
evrardjp | odyssey4me: thanks for this chroot addition. Voted | 13:56 |
odyssey4me | slowly working through what we do to prep the base cache now and finding unnecessary things, hence https://review.openstack.org/404219 | 13:56 |
openstackgerrit | Merged openstack/openstack-ansible-plugins: Add ability to execute against a remote chroot https://review.openstack.org/400338 | 13:57 |
evrardjp | odyssey4me: you plan to add docs for that? | 13:57 |
odyssey4me | evrardjp for the remote chroot? | 13:57 |
evrardjp | yup | 13:57 |
evrardjp | in the plugins repo | 13:58 |
*** jheroux has joined #openstack-ansible | 13:58 | |
odyssey4me | not really right now, I don't think we really have a place for that sort of thing | 13:58 |
evrardjp | that could be good to show to external ppl | 13:58 |
odyssey4me | sure, maybe - I'd like to get further along with it to validate its use before exposing it | 13:58 |
*** vnogin has quit IRC | 13:59 | |
*** cathrichardson has joined #openstack-ansible | 14:01 | |
openstackgerrit | Merged openstack/openstack-ansible-os_glance: Fix virtualenv-tools issue https://review.openstack.org/403701 | 14:09 |
openstackgerrit | Merged openstack/openstack-ansible-os_cinder: Fix virtualenv-tools issue https://review.openstack.org/403696 | 14:14 |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role https://review.openstack.org/402074 | 14:14 |
*** jperry has joined #openstack-ansible | 14:14 | |
*** v1k0d3n has quit IRC | 14:15 | |
*** v1k0d3n has joined #openstack-ansible | 14:15 | |
*** Andrew_jedi has joined #openstack-ansible | 14:16 | |
*** jamesdenton has joined #openstack-ansible | 14:17 | |
*** fxpester has joined #openstack-ansible | 14:18 | |
Andrew_jedi | Hello folks, I have deployed OSA in Openstack vm. my objective is to make glance api publicly available so that i can test glance-replication. But when i try to use the floating ip associated with the openstack vm as the haproxy external lb ip, obviously haproxy refuses to bind. Could you please help me in figuring out how to configure the glance_api file "/etc/haproxy/conf.d" so that every... | 14:18 |
Andrew_jedi | ...call made FLOATING_IP:9292 can be redirected to LB_IP:9292? | 14:19 |
*** fxpester|2 has joined #openstack-ansible | 14:20 | |
Andrew_jedi | May be i cannot do that with haproxy? | 14:22 |
*** fxpester|3 has joined #openstack-ansible | 14:22 | |
*** stevelle has quit IRC | 14:23 | |
*** fxpester has quit IRC | 14:23 | |
*** jamesdenton has quit IRC | 14:23 | |
*** agrebennikov has joined #openstack-ansible | 14:24 | |
logan- | odyssey4me: while we were on the topic of that ssh plugin I finally remembered to file this wishlist bug :P https://bugs.launchpad.net/openstack-ansible/+bug/1645732 | 14:24 |
openstack | Launchpad bug 1645732 in openstack-ansible "Allow for ansible become in SSH plugin" [Undecided,New] | 14:24 |
*** fxpester|2 has quit IRC | 14:25 | |
odyssey4me | logan- ah yes, nice - hopefully someone can pick that up at some point | 14:25 |
odyssey4me | maybe cloudnull will find a gap | 14:25 |
*** xavierr has joined #openstack-ansible | 14:27 | |
evrardjp | guys, you force me to regenerate the bug triage list | 14:27 |
andymccr | Andrew_jedi: on which host is the FLOATING_IP, and which host has the LB_IP? | 14:28 |
evrardjp | Andrew_jedi: you can basically use a sysctl for that | 14:29 |
*** fguillot has quit IRC | 14:29 | |
evrardjp | but I think you should instead, bind to your proper ip in external ip | 14:29 |
evrardjp | If I understood you correctly | 14:30 |
*** smatzek has quit IRC | 14:30 | |
*** jamesdenton has joined #openstack-ansible | 14:30 | |
Andrew_jedi | andymccr: I have one controller where glance container is running. this controller machine has an IP "192.168.122.111" which i am using for public endpoints. And there is a floating ip which is attached to this controller machine, by LB_IP , i meant the "external_lb_vip_address". | 14:30 |
Andrew_jedi | evrardjp: What i want is this, FLOATING_IP:9292 --> glance_container_address:9292 | 14:32 |
*** fxpester has joined #openstack-ansible | 14:32 | |
evrardjp | well that's something I understood | 14:33 |
mgariepy | i think you only need to update your endpoint in Openstack. to the floating ip. | 14:33 |
evrardjp | the question is: is it fine for you to have the floating done by openstack in any case? | 14:33 |
*** stevelle has joined #openstack-ansible | 14:34 | |
mgariepy | usualy the floating ip is natted to your ip and not bindable in the vm.. | 14:34 |
evrardjp | in that case you can use your tenant private IP as external vip | 14:34 |
evrardjp | mgariepy: well that's the other way to do it | 14:34 |
Andrew_jedi | evrardjp: Its a test setup where i am testing glance-replicator. The whole objective is to access the glance in this VM from another openstack setup. | 14:34 |
evrardjp | you can also make it work without force binding :p | 14:34 |
evrardjp | but I'll not talk about this right now | 14:35 |
evrardjp | Andrew_jedi: what's your external_vip? | 14:35 |
Andrew_jedi | evrardjp: 192.168.122.111 | 14:35 |
*** fxpester|3 has quit IRC | 14:35 | |
mgariepy | w00t os_horizon : 2016-11-29 14:35:50.842703 | [Zuul] Job complete, result: SUCCESS | 14:36 |
evrardjp | so that's your ip in your tenant, not the floating one | 14:36 |
evrardjp | and what's in your /etc/openstack_deploy/openstack_user_config ? | 14:36 |
Andrew_jedi | evrardjp: Yep, that's my private ip. | 14:36 |
Andrew_jedi | evrardjp: http://paste.openstack.org/show/590828/ | 14:37 |
*** Jack_Iv_ has joined #openstack-ansible | 14:38 | |
evrardjp | interesting | 14:39 |
evrardjp | and you can't access to it? | 14:39 |
Andrew_jedi | evrardjp: endpoints and netstat, http://paste.openstack.org/show/590830/ | 14:40 |
evrardjp | technically you don't bind on the your floating IP | 14:40 |
evrardjp | so this is good to me | 14:40 |
evrardjp | from where do you want to access that? | 14:40 |
evrardjp | you can't access from an IP in the same network? | 14:41 |
evrardjp | you want to use the floating for that and you have keystone issues? | 14:41 |
*** woodard has quit IRC | 14:41 | |
evrardjp | if that's the case, mgariepy suggestion would be the best, and there is probably a public endpoint change that should be done | 14:42 |
*** Jack_Iv_ has quit IRC | 14:42 | |
Andrew_jedi | evrardjp: This is the issue, http://paste.openstack.org/show/590831/ | 14:43 |
evrardjp | dear cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, | 14:43 |
evrardjp | spotz, vdo, jmccrory, alextricity25, jasondotstar, KLevenstein, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, darrenc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397 : | 14:43 |
evrardjp | the osa bug triage will start in 1h15’. Please have a look at the bug list before starting: https://etherpad.openstack.org/p/osa-bugtriage | 14:43 |
*** chhavi has quit IRC | 14:43 | |
*** cathrichardson has quit IRC | 14:44 | |
Andrew_jedi | evrardjp: When i make an api call to 192.168.122.111:9292, it works. but when i make an api call to FLOATING_API:9292. it does not work. | 14:44 |
evrardjp | Andrew_jedi: I think you're up to update your public endpoint :p | 14:44 |
evrardjp | endpoints* | 14:44 |
Andrew_jedi | evrardjp: You mean only the glance endpoint? | 14:44 |
evrardjp | all of them | 14:45 |
mgariepy | can I have some reviews on this one please : https://review.openstack.org/#/c/402074/ ? | 14:45 |
evrardjp | keystone for example | 14:45 |
evrardjp | manually with the cli | 14:45 |
evrardjp | it's gonna work easily that way | 14:45 |
Andrew_jedi | ohhh, so your recommendation is to update the keystone and glance public endpoints to begin with? | 14:45 |
evrardjp | yes | 14:46 |
Andrew_jedi | Cool, let me try that | 14:46 |
evrardjp | like mgariepy's suggestion | 14:46 |
evrardjp | keep the infrastructure the way it is | 14:46 |
*** cathrichardson has joined #openstack-ansible | 14:46 | |
asettle | Thanks evrardjp | 14:47 |
andymccr | mgariepy: nice! | 14:47 |
*** vnogin has joined #openstack-ansible | 14:48 | |
mgariepy | andymccr, it's finally taking shape ! :D | 14:48 |
andymccr | mgariepy: yeah! what are we still missing support for? | 14:48 |
mgariepy | https://etherpad.openstack.org/p/osa-ocata-centos-7-worksheet | 14:48 |
mgariepy | gnocchi, aodh ceilometer, then osa for bootstrap aio. | 14:49 |
andymccr | ahh nice | 14:49 |
mgariepy | and some other small issues that needs some love. haha | 14:49 |
andymccr | yeah. i should file a bug for the swift logging | 14:49 |
andymccr | i also need to do a run of gate vote promotions for the various roles that support has been added for | 14:49 |
mgariepy | at some point. | 14:50 |
mgariepy | nova takes a lot more time to run on centos | 14:50 |
andymccr | yeah i think the integrated build may be an issue (time wise) | 14:50 |
evrardjp | mgariepy: could you explain why the remove Listen from Apache config ? | 14:52 |
mgariepy | conflict with port.conf | 14:52 |
mgariepy | evrardjp, ^^ | 14:52 |
evrardjp | That's listed nowhere! | 14:52 |
evrardjp | :p | 14:52 |
hughsaunders | mattt: ^ | 14:53 |
evrardjp | but yes it makes sense | 14:53 |
mgariepy | I can add a comments in the tasks if you want. | 14:53 |
*** fxpester|2 has joined #openstack-ansible | 14:53 | |
evrardjp | mgariepy: I'd be happy for this one. I'll mention it in my review | 14:53 |
paulfantom | mgariepy: also basic support for ceph_client will be quite simple and I'm working on it right now :) | 14:53 |
mgariepy | paulfantom, great | 14:54 |
mgariepy | I'll need ceph for prod but I prefer to have centos voting for the base first in my case and right now i'me very happy with Ubuntu for my production system. | 14:56 |
*** fxpester has quit IRC | 14:56 | |
*** whiteveil has joined #openstack-ansible | 14:56 | |
*** smatzek has joined #openstack-ansible | 14:57 | |
mgariepy | paulfantom, let us know if you need help submitting patches. | 14:57 |
paulfantom | ok, I'll let you know, when it will be ready :) | 14:58 |
drifterza | what time's bug triage ? | 14:59 |
mattt | hughsaunders: wuzzat ? | 14:59 |
andymccr | drifterza: in like an hour | 14:59 |
mgariepy | paulfantom, you can submit partial patches if you want | 14:59 |
drifterza | ah okay | 14:59 |
evrardjp | drifterza: yup, 1hr | 14:59 |
andymccr | 16:00 UTC! | 15:00 |
mrhillsman | i have an operator asking for L > M upgrades, specifically openstack_dashboard, were there any problems with python's south library seen | 15:00 |
paulfantom | mgariepy, yeah I know | 15:00 |
andymccr | mrhillsman: we haven't seen any bugs for that afaik - and there have been quite a few people doing/testing upgrades from L->M | 15:00 |
hughsaunders | mattt: small chance that ports.conf conflict could be related to hirizon issue you were lookig into? | 15:00 |
mrhillsman | thx andymccr | 15:01 |
evrardjp | mrhillsman: I suppose there could be issues with specific dashboards due to the jump of version | 15:01 |
andymccr | so TLDR, so far - no :) but if there are issues and they can file a bug we can try take a look! | 15:01 |
andymccr | or come talk to us here :) | 15:01 |
mattt | hughsaunders: i don't think so, i printed the ports config in debug and didn't see anything out of the ordinary | 15:01 |
evrardjp | mrhillsman: the standard dashboards work fine | 15:01 |
mgariepy | paulfantom, i added your name in the etherpad so nobody else pick it. | 15:01 |
mrhillsman | gotcha | 15:01 |
evrardjp | mrhillsman: there was a jump of version of angular | 15:01 |
mrhillsman | thx | 15:01 |
mrhillsman | ah ok | 15:02 |
paulfantom | mgariepy, thx | 15:02 |
*** rgogunskiy has quit IRC | 15:04 | |
*** spotz_zzz is now known as spotz | 15:04 | |
*** TxGirlGeek has joined #openstack-ansible | 15:04 | |
*** fxpester has joined #openstack-ansible | 15:05 | |
*** Mudpuppy has joined #openstack-ansible | 15:05 | |
mgariepy | evrardjp, the safeguard isn't needed I guess it doesn't match in the apache.conf file on ubuntu and I guess it would conflict on ubuntu as well if it's there. | 15:05 |
odyssey4me | hughsaunders argh https://git.launchpad.net/cirros/commit/?id=9a7c371ef329cf78f256d0a5a8f475d9c57f5477 | 15:06 |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role https://review.openstack.org/402074 | 15:06 |
*** fxpester|2 has quit IRC | 15:07 | |
evrardjp | mgariepy: there is indeed no match | 15:08 |
mgariepy | if you add Listen 80 on the apache.conf would it restard ? | 15:08 |
evrardjp | mgariepy: but you're editing the security file | 15:09 |
*** Jeffrey4l has quit IRC | 15:09 | |
mgariepy | hmm will switch it to apache_conf | 15:10 |
mgariepy | (it's the same on Centos) | 15:10 |
Andrew_jedi | evrardjp mgariepy : This is after changing the keystone and glance public endpoints. http://paste.openstack.org/show/590835/ | 15:10 |
hughsaunders | odyssey4me: has there actually been a release that contains that? | 15:11 |
skape | Hi again !! I have a problem, I had a wrong host in shared-infra_hosts in openstack_user_config.yml, I removed it but openstack-ansible still installs it , I already tried removing the content of /etc/openstack_deploy/ansible_facts/ | 15:11 |
odyssey4me | hughsaunders not sure - possibly, just saw it on the ML | 15:11 |
hughsaunders | 0.3.4 was released in 2015 | 15:11 |
hughsaunders | I've been waiting for a release containing one of my fixes for ages | 15:11 |
odyssey4me | skape you need to use the inventory-manage script to remove it from the inventory | 15:11 |
skape | odyssey4me : ok thx | 15:12 |
*** dxiri has joined #openstack-ansible | 15:12 | |
*** jmckind has joined #openstack-ansible | 15:12 | |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role https://review.openstack.org/402074 | 15:13 |
mgariepy | evrardjp, fixed .. | 15:14 |
evrardjp | mgariepy: wait | 15:14 |
Andrew_jedi | andymccr: Since it is an openstack vm, do you think i will need to open port 9292 :P | 15:14 |
evrardjp | omg too fast :p | 15:14 |
mgariepy | lol | 15:14 |
mgariepy | sorry.. | 15:14 |
*** shausy has quit IRC | 15:14 | |
*** fxpester|2 has joined #openstack-ansible | 15:14 | |
evrardjp | so my concern is that we shouldn't touch the file if there is nothing to do there. I'm not 100% sure how ansible lineinfile module works with line: present on an absent line, and using this line as backref | 15:15 |
evrardjp | if he includes a #Listen that would force a restart of apache2 without reasons | 15:16 |
mgariepy | ok | 15:16 |
evrardjp | at least on the first run | 15:16 |
evrardjp | which is why I thought it could be better to do this conditionally | 15:17 |
*** fxpester|3 has joined #openstack-ansible | 15:17 | |
evrardjp | and also the deployer may have a Listen thing somewhere | 15:17 |
mgariepy | ok should I check for port 80 specifically then ? | 15:17 |
*** fxpester has quit IRC | 15:17 | |
evrardjp | let me have a look at the module quickly | 15:18 |
evrardjp | then I'll know | 15:18 |
*** fxpester|2 has quit IRC | 15:19 | |
*** haad1 has quit IRC | 15:20 | |
*** fxpester has joined #openstack-ansible | 15:20 | |
*** weezS has joined #openstack-ansible | 15:20 | |
*** dxiri has quit IRC | 15:20 | |
*** weezS has quit IRC | 15:20 | |
*** dxiri has joined #openstack-ansible | 15:21 | |
evrardjp | mgariepy: so the ansible module nicely behaves, surprisingly | 15:22 |
*** weezS has joined #openstack-ansible | 15:22 | |
mgariepy | haha :) | 15:22 |
*** fxpester|3 has quit IRC | 15:22 | |
evrardjp | so maybe we should just rollback the last part of the last patchset that moved from horizon_apache_security_conf to horizon_apache_conf | 15:23 |
evrardjp | I think horizon_apache_security_conf is quite correct to me | 15:23 |
evrardjp | confirmation in a few seconds | 15:23 |
oanson | evrardjp, hi. | 15:24 |
oanson | I don't know if you saw, but I removed the [WIP] from the dragonflow patch | 15:24 |
Andrew_jedi | evrardjp mgariepy: Thanks for the help guys, it was a security group rule issue. I fixed that and now i can access glance from outside :) | 15:24 |
oanson | I think most issues will now be on the dragonflow end | 15:25 |
openstackgerrit | Flávio Ramalho proposed openstack/openstack-ansible-os_ironic: Add ldlinux.c32 to the tftp directory https://review.openstack.org/404273 | 15:25 |
mgariepy | Andrew_jedi, i would be curious of having your impression on the glance-replicator | 15:25 |
whiteveil | in the openstack repo, is there any way to easily isolate just things that are Ubuntu only, as I’m looking to audit the Ubuntu config changes | 15:26 |
*** jmckind_ has joined #openstack-ansible | 15:26 | |
*** dxiri has quit IRC | 15:26 | |
*** dxiri has joined #openstack-ansible | 15:26 | |
*** jmckind has quit IRC | 15:27 | |
Andrew_jedi | mgariepy: so far, I had to patch the code in liberty to make cli work. Documentation is not even worth going through. I will let you if it still works. | 15:27 |
mgariepy | ha ok ;) haha | 15:28 |
*** michaelgugino has joined #openstack-ansible | 15:30 | |
*** Jack_Iv_ has joined #openstack-ansible | 15:31 | |
*** woodard has joined #openstack-ansible | 15:31 | |
*** chris_hultin|AWA is now known as chris_hultin | 15:31 | |
*** woodard has quit IRC | 15:31 | |
openstackgerrit | Marc Gariépy proposed openstack/openstack-ansible-os_horizon: Add CentOS support for os_horizon role https://review.openstack.org/402074 | 15:31 |
*** woodard has joined #openstack-ansible | 15:31 | |
*** Jack_Iv_ has quit IRC | 15:33 | |
evrardjp | oanson: great I'll have a look and test it! | 15:33 |
oanson | Thanks :) | 15:33 |
evrardjp | Andrew_jedi: haha I was afraid of that! | 15:33 |
evrardjp | classic | 15:33 |
*** fxpester|2 has joined #openstack-ansible | 15:34 | |
evrardjp | I hsould have told you | 15:34 |
evrardjp | :/ | 15:34 |
Andrew_jedi | evrardjp: :/ | 15:34 |
Andrew_jedi | evrardjp: The OpenStack C2C migration is way more interesting than i imagined. | 15:35 |
*** dffco has joined #openstack-ansible | 15:35 | |
*** fxpester has quit IRC | 15:36 | |
*** h5t4 has joined #openstack-ansible | 15:37 | |
*** fxpester has joined #openstack-ansible | 15:38 | |
*** fxpester|2 has quit IRC | 15:40 | |
*** klamath has joined #openstack-ansible | 15:41 | |
*** dxiri has quit IRC | 15:41 | |
*** Andrew_jedi has quit IRC | 15:43 | |
*** Jeffrey4l has joined #openstack-ansible | 15:44 | |
*** woodard has quit IRC | 15:44 | |
*** woodard has joined #openstack-ansible | 15:44 | |
*** klamath has quit IRC | 15:45 | |
*** fxpester|2 has joined #openstack-ansible | 15:46 | |
*** oanson has quit IRC | 15:46 | |
*** cmart has joined #openstack-ansible | 15:46 | |
*** weezS_ has joined #openstack-ansible | 15:47 | |
*** fguillot has joined #openstack-ansible | 15:47 | |
*** fxpester|3 has joined #openstack-ansible | 15:48 | |
*** fxpester has quit IRC | 15:48 | |
*** weezS has quit IRC | 15:49 | |
*** weezS_ is now known as weezS | 15:49 | |
*** haad1 has joined #openstack-ansible | 15:49 | |
*** haad1 has quit IRC | 15:50 | |
*** galstrom_zzz is now known as galstrom | 15:51 | |
*** fxpester|2 has quit IRC | 15:51 | |
*** Jeffrey4l has quit IRC | 15:51 | |
*** Jeffrey4l has joined #openstack-ansible | 15:51 | |
*** adrian_otto has joined #openstack-ansible | 15:56 | |
*** TxGirlGeek has quit IRC | 15:56 | |
*** Jack_Iv_ has joined #openstack-ansible | 15:56 | |
*** TxGirlGeek has joined #openstack-ansible | 15:56 | |
*** dxiri has joined #openstack-ansible | 15:57 | |
evrardjp | netsplits or it's just me? | 15:57 |
drifterza | just you | 15:58 |
asettle | WIN gate jobs passed odyssey4me and andymccr - now, how are the OSA gates going? This has to go through: https://review.openstack.org/#/c/404150/ before the index file can :) | 15:58 |
asettle | evrardjp: just lots of people coming/going | 15:58 |
*** Andrew_jedi has joined #openstack-ansible | 15:58 | |
odyssey4me | asettle it's busy going through | 15:58 |
evrardjp | WIN as in windows? | 15:59 |
*** javeriak has joined #openstack-ansible | 15:59 | |
asettle | Cool, the gates were broken yesterday so just checking | 15:59 |
asettle | evrardjp: you know it | 15:59 |
*** vnogin has quit IRC | 15:59 | |
evrardjp | maybe you can use #success | 15:59 |
openstackgerrit | Merged openstack/openstack-ansible: [DOCS] Adds a cookie cutter deploy guide for d.o.o https://review.openstack.org/404150 | 16:00 |
andymccr | like magic | 16:01 |
*** Jack_Iv_ has quit IRC | 16:01 | |
evrardjp | woot! | 16:01 |
asettle | ... wow | 16:02 |
asettle | magic | 16:02 |
evrardjp | guys, it's that time of the day | 16:02 |
asettle | good job folks | 16:02 |
asettle | evrardjp: YAYYY | 16:02 |
evrardjp | of the week should I say | 16:02 |
evrardjp | Bug triage cloudnull, mattt, andymccr, d34dh0r53, hughsaunders, b3rnard0, palendae, Sam-I-Am, odyssey4me, serverascode, rromans, erikmwilson, mancdaz, _shaps_, BjoernT, claco, echiu, dstanek, jwagner, ayoung, prometheanfire, evrardjp, arbrandes, mhayden, scarlisle, luckyinva, ntt, javeriak, automagically, spotz, vdo, jmccrory, alextricity25, jasondotstar, admin0, michaelgugino, ametts, v1k0d3n, severion, bgmccollum, dar | 16:02 |
evrardjp | renc, JRobinson__, asettle, colinmcnamara, thorst, adreznec, eil397, qwang,nishpatwa_, cathrichardson, drifterza !!! | 16:02 |
evrardjp | Here is our bug list for today https://etherpad.openstack.org/p/osa-bugtriage | 16:02 |
evrardjp | (same link as every single week!) | 16:02 |
evrardjp | my browser is quite laggy | 16:02 |
odyssey4me | asettle lies - the gates are never broken :p | 16:03 |
asettle | odyssey4me: HAAAA | 16:03 |
evrardjp | so the first is | 16:03 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1645732 | 16:03 |
openstack | Launchpad bug 1645732 in openstack-ansible "Allow for ansible become in SSH plugin" [Undecided,New] | 16:03 |
*** rmelero has joined #openstack-ansible | 16:03 | |
evrardjp | I think we should classify this as wishlist | 16:03 |
logan- | +1 | 16:03 |
andymccr | yeah | 16:03 |
evrardjp | anyone wants it? it seems fun! | 16:04 |
*** spotz is now known as spotz_zzz | 16:04 | |
evrardjp | if not, I'll just move it as confirmed | 16:04 |
*** Jack_Iv_ has joined #openstack-ansible | 16:04 | |
*** Jack_Iv_ has quit IRC | 16:04 | |
logan- | i tried but my python is too weak :) | 16:04 |
evrardjp | ok let's talk about the next one then | 16:05 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1645728 | 16:05 |
openstack | Launchpad bug 1645728 in openstack-ansible "Liberty to Liberty Upgrade: MariaDB upgrade stuck on post dpkg configure task" [Undecided,New] | 16:05 |
evrardjp | L to L update! | 16:05 |
andymccr | ok so i think the point of this bug is to ensure it isnt happening on master or M/N | 16:05 |
*** mongo3_ has joined #openstack-ansible | 16:05 | |
andymccr | BjoernT put a comment in there "Since Liberty is now EOL, I'm not sure how we handle this issue which may be reappearing on future versions. That's why I opened this issue" | 16:05 |
evrardjp | which may | 16:06 |
andymccr | yeah im not sure how we can reproduce that | 16:06 |
evrardjp | I'm lacking resources to reproduce it myself | 16:06 |
*** vnogin has joined #openstack-ansible | 16:07 | |
andymccr | yeah | 16:07 |
andymccr | i guess we push that out for next week! | 16:07 |
BjoernT | I would guess the same problem is apparent during mitaka to mitaka upgrades or newer | 16:07 |
andymccr | ahh ok | 16:07 |
BjoernT | since the issues seemed to come from the dpkg package itself | 16:08 |
*** mongo3 has quit IRC | 16:08 | |
*** dxiri has quit IRC | 16:09 | |
BjoernT | we may create ubuntu bugs for the mariadb package because they try to do a mysql_install_db on a running database, of course it fails | 16:09 |
*** dxiri has joined #openstack-ansible | 16:09 | |
logan- | i think we already do some upgrade tests in the galera server role. wonder why it wouldn't be catching this. maybe some room for improvement there if it is something reproducible | 16:09 |
BjoernT | I noticed that first form 10.0.27 to .28 which are quite new | 16:10 |
evrardjp | logan-: do we do upgrade test of galera in the role yet? | 16:10 |
*** weezS has quit IRC | 16:10 | |
andymccr | logan-: perhaps it is the kind of bug that only occurs on systems that have been running a while - new deploys that then get upgraded potentially dont see this | 16:10 |
logan- | evrardjp: i think it might only be major version upgrade tests | 16:10 |
mgariepy | maybe it depends on the traffic there is when the upgrade occurs | 16:11 |
evrardjp | BjoernT: interesting bug, have you seen this in M? | 16:11 |
logan- | maybe not though. at first glance I don't see the tests in the repo | 16:11 |
andymccr | logan-: haha yeah me neither | 16:12 |
andymccr | i will add that to the bp | 16:12 |
evrardjp | logan-: rabbit gets tested | 16:12 |
evrardjp | for upgrades | 16:12 |
evrardjp | I think we could thank jmccrory for that :D | 16:12 |
evrardjp | IIRC | 16:12 |
evrardjp | anyway | 16:12 |
evrardjp | this needs to be confirmed, but also see if it's the scope of openstack-ansible | 16:12 |
logan- | https://github.com/openstack/openstack-ansible-galera_server/commit/7bec84f67aa22a2f546bfbfa8be2d81d48ab4184 | 16:12 |
jmccrory | think the galera upgrade tests were removed a while back since we stayed on 10.0 for a few cycles | 16:12 |
logan- | I think that is what I was thinking of :) | 16:12 |
logan- | yeah | 16:13 |
evrardjp | this sounds like a packaging issue that should be filed upstream | 16:13 |
evrardjp | BjoernT: could you pull the strings for that? | 16:13 |
evrardjp | seems a big deal to me | 16:13 |
evrardjp | :p | 16:13 |
BjoernT | yeah I have access to paid ubuntu support let me check on that later | 16:13 |
*** weezS has joined #openstack-ansible | 16:13 | |
evrardjp | cool | 16:13 |
logan- | agreed. i think the osa bug should be viewed as a testing improvement and the actual fix filed upstream | 16:14 |
*** mongo3 has joined #openstack-ansible | 16:14 | |
evrardjp | I'll document this discussion in our bug after the triage | 16:14 |
evrardjp | thanks everyone | 16:14 |
evrardjp | next | 16:15 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1645512 | 16:15 |
openstack | Launchpad bug 1645512 in openstack-ansible "Documentation bug - network information is not visible" [Undecided,New] | 16:15 |
*** winggundamth_ has joined #openstack-ansible | 16:15 | |
evrardjp | confirmed to me :p | 16:15 |
andymccr | yeah | 16:15 |
evrardjp | asettle: your opinion on urgency? | 16:15 |
asettle | Yeah that should be a quick fix | 16:15 |
asettle | evrardjp: should take you a grand total of 10 seconds, go low/medium because it's not great to have missing info | 16:15 |
asettle | But it's not critical | 16:15 |
evrardjp | asettle: ok, I'll tag it as low-hanging-fruit then | 16:16 |
evrardjp | thanks | 16:16 |
*** TxGirlGeek has quit IRC | 16:16 | |
evrardjp | next | 16:16 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1645371 | 16:16 |
openstack | Launchpad bug 1645371 in openstack-ansible "Consider async jobs in security role" [Undecided,New] | 16:16 |
*** jlockwood has quit IRC | 16:17 | |
evrardjp | If that could be considered as a bug, I'd call it wishlist :p | 16:17 |
*** mongo3_ has quit IRC | 16:17 | |
evrardjp | If there was a "TODO" in the list I'd use that. | 16:17 |
evrardjp | or TODO(mhayden) :p | 16:17 |
*** vnogin has quit IRC | 16:17 | |
evrardjp | everybody agrees? | 16:17 |
mhayden | :) | 16:17 |
evrardjp | I'll mark it confirmed :p | 16:18 |
evrardjp | and wishlist | 16:18 |
andymccr | assign to mhayden - set the importance to MAJOR | 16:18 |
* mhayden cackles | 16:18 | |
asettle | andymccr: omg you are not coming home tonight | 16:18 |
asettle | that was terrible | 16:18 |
*** winggundamth_ has quit IRC | 16:18 | |
evrardjp | I think it was fine | 16:18 |
asettle | evrardjp: ohhhh take his side | 16:18 |
evrardjp | no, I had a major laugh on it. | 16:19 |
whiteveil | have any of you guys ever used clamav on a production server? I see it’s in the role, but just curious what everyone’s take is on it | 16:19 |
*** chhavi has joined #openstack-ansible | 16:19 | |
* asettle sighs | 16:19 | |
evrardjp | whiteveil: could we discuss that later after the bug triage please? | 16:19 |
whiteveil | yeah of course | 16:19 |
evrardjp | thanks | 16:19 |
whiteveil | sorry about that | 16:19 |
evrardjp | so next | 16:19 |
evrardjp | it's us, we got sidetracked | 16:19 |
evrardjp | anyway, next is: | 16:19 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1645297 | 16:19 |
openstack | Launchpad bug 1645297 in openstack-ansible "[DOCS] 'preflight checks' incomplete info" [Undecided,New] | 16:19 |
evrardjp | asettle: Ok I thought both were touching the same file/contents and edits | 16:21 |
*** vnogin has joined #openstack-ansible | 16:21 | |
asettle | I am touching them, but I don't want it worked on in the same page. | 16:21 |
evrardjp | what do you need for it? | 16:21 |
asettle | patch* | 16:21 |
evrardjp | asettle: fine for me | 16:21 |
asettle | The whole section actually needs to be written. "perform preflight checks' is vague, and needs to be fleshed out appropriately. | 16:21 |
asettle | If a user is performing an upgrade, needs to be identified in full what checks they are going to perform. | 16:21 |
asettle | It'll be a full fleshing of the section, hence, new bug :) | 16:22 |
evrardjp | so the issue is that it's too vague, and you want us to cover this | 16:22 |
asettle | If possible, please. | 16:22 |
asettle | I have some stuff from the RPCO guides I can take. | 16:22 |
asettle | But it's not complete. | 16:22 |
jmccrory | the upgrade script used to include really basic checks to make sure the it was upgrading from the right release, i don't think it does any of that now | 16:22 |
asettle | andymccr was going to help out. | 16:22 |
andymccr | wait what? | 16:22 |
evrardjp | :) | 16:22 |
evrardjp | voluntold | 16:22 |
asettle | He's making faces at me. | 16:22 |
asettle | He's relaly unhappy. | 16:22 |
evrardjp | relaly? | 16:23 |
asettle | relaly relaly | 16:23 |
evrardjp | :p | 16:23 |
asettle | :p | 16:23 |
andymccr | i think it would be useful to have ops input on that really | 16:23 |
asettle | I agree, but we still need it to be fleshed. | 16:23 |
asettle | Anyway, it's triage not discussion | 16:23 |
asettle | evrardjp: confirmed, and medium please | 16:23 |
evrardjp | ok, could we discuss that in another media? | 16:23 |
evrardjp | ok | 16:23 |
andymccr | next! | 16:23 |
evrardjp | thanks | 16:23 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1644565 | 16:23 |
openstack | Launchpad bug 1644565 in openstack-ansible "Warning Exception in safe_eval()" [Undecided,New] | 16:23 |
evrardjp | ok cool we can ignore this one | 16:24 |
andymccr | looks like we can close that one | 16:24 |
evrardjp | invalid yes | 16:24 |
evrardjp | next | 16:24 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1644544 | 16:24 |
openstack | Launchpad bug 1644544 in openstack-ansible "cannot install shibboleth on CentOS7 from repository" [Undecided,New] | 16:24 |
evrardjp | ok I confirmed this bug at the time it was filed | 16:25 |
paulfantom | basically it is resolved by ftp.gwdg.de. They had some problems with opensuse repository system, which are fixed by now. However there is no safeguard against this issue in the future. | 16:25 |
evrardjp | this was used to track it | 16:25 |
evrardjp | paulfantom: exactly | 16:25 |
evrardjp | but there is no safe guard we can have IMO | 16:26 |
evrardjp | shib consortium or downloads.suse should care | 16:26 |
evrardjp | we cannot mirror the whole world in openstack-infra | 16:26 |
paulfantom | yes, you're right | 16:26 |
evrardjp | and also it's reduced to shib users | 16:26 |
mgariepy | evrardjp, just put that in the cloud. | 16:26 |
evrardjp | :D | 16:26 |
evrardjp | shib users have probably a link to the consortium | 16:26 |
evrardjp | :p | 16:26 |
paulfantom | and problem solved :D | 16:27 |
TobiSan | getting "TypeError: Cannot read property 'data' of undefined" when trying to create a cirros image in horizon | 16:27 |
TobiSan | any known issues on 14.0.2 with this? | 16:27 |
mgariepy | anyway, for the gate check, it's now skipped, and for a prod deployment you really should mirror stuff that aren't stable and use that. | 16:28 |
*** victorhe has joined #openstack-ansible | 16:28 | |
evrardjp | yes, I think because we don't use that in 100% of the cases, this could be classified as won't fix | 16:28 |
andymccr | agree | 16:28 |
*** victorhe has quit IRC | 16:28 | |
evrardjp | mgariepy: I think shib isn't required anymore anyway | 16:28 |
evrardjp | if not we'll have to submit a bug for that :p | 16:28 |
*** fxpester|3 has quit IRC | 16:28 | |
*** victorhe has joined #openstack-ansible | 16:28 | |
evrardjp | I'll document this discussion in the bug | 16:29 |
evrardjp | next | 16:29 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1644349 | 16:29 |
openstack | Launchpad bug 1644349 in openstack-ansible "Add Release Note for Trusty Deprecation" [Undecided,New] - Assigned to Amy Marrich (amy-marrich) | 16:29 |
evrardjp | TobiSan: we'll analyse this after the bug triage if you don't mind | 16:29 |
evrardjp | Confirmed Medium | 16:29 |
*** victorhe has quit IRC | 16:30 | |
evrardjp | Fix when convenient or schedule to fix later | 16:30 |
evrardjp | fine for you? | 16:30 |
andymccr | yeah cool | 16:30 |
TobiSan | ok thanks evrardjp | 16:30 |
andymccr | next! | 16:30 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643991 | 16:30 |
openstack | Launchpad bug 1643991 in openstack-ansible "504 Gateway Timeout when creating a port" [Undecided,New] - Assigned to Saulo Aislan (sauloaislan) | 16:30 |
*** victorhe has joined #openstack-ansible | 16:30 | |
evrardjp | ok | 16:31 |
andymccr | hmm | 16:31 |
evrardjp | we need to be more flexible with timeouts in haproxy apparently | 16:31 |
*** victorhe has quit IRC | 16:31 | |
evrardjp | I'd like to see this confirmed by ppl, else I just consider it's a wishlist feature | 16:32 |
andymccr | yeah i think the bug is to adjust timeouts or be able to so thats wishlist | 16:32 |
*** victorhe has joined #openstack-ansible | 16:32 | |
*** victorhe has quit IRC | 16:32 | |
andymccr | im surprised nobody else has seen this - or im wondering why the ports were taking so long to create. but that is a separate issue | 16:32 |
jmccrory | sounds like bug with whatever driver they were testing too | 16:32 |
evrardjp | this is why I wanted to avoid wishlist, but anyway more flexibility in haproxy was already asked by ppl | 16:33 |
evrardjp | jmccrory: fair point | 16:33 |
andymccr | yeah that seems fine | 16:33 |
andymccr | regardless we cant recreate that issue with those details, so wishlist confirmed seems fine on the basis we add more flexibility to haproxy | 16:33 |
*** dffco has quit IRC | 16:34 | |
*** javeriak has quit IRC | 16:34 | |
evrardjp | next | 16:34 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643727 | 16:34 |
openstack | Launchpad bug 1643727 in openstack-ansible "Mitaka Upgrade: rfc1034_1035-cleanup.yml does not work with insecure public API" [Undecided,New] | 16:34 |
evrardjp | well I never got the issue because I used proper certificates :p | 16:35 |
andymccr | are the clients really ignoring internal vs publicURL again? | 16:35 |
evrardjp | what? | 16:35 |
andymccr | there were a whole bunch of bugs (more than once) with various clients that forced publicURL and would ignore OS_ENDPOINT_TYPE altogether | 16:36 |
*** dffco has joined #openstack-ansible | 16:36 | |
andymccr | but they got fixed (and happened again, and got fixed again) | 16:36 |
evrardjp | yeah but here it's not really the point | 16:36 |
evrardjp | you have terrible certificates, remember to use --insecure | 16:36 |
*** pcaruana has quit IRC | 16:36 | |
evrardjp | I'll leave this as new because I don't see anyone confirming it recently | 16:37 |
*** javeriak has joined #openstack-ansible | 16:38 | |
evrardjp | oh no I get it | 16:38 |
evrardjp | rfc1034_1035-cleanup.yml is using CLI | 16:39 |
evrardjp | we don't pass the --insecure flag | 16:39 |
evrardjp | IIRC | 16:39 |
evrardjp | that's what it is | 16:39 |
evrardjp | let me have a look one sec | 16:39 |
evrardjp | yup we are using the cli of every single client | 16:40 |
*** javeriak has quit IRC | 16:40 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs] https://review.openstack.org/403833 | 16:40 |
evrardjp | and we never pass insecure | 16:40 |
evrardjp | looks valid to me | 16:40 |
evrardjp | we should ensure it's done internally | 16:41 |
evrardjp | I'll have a deeper look before confirming | 16:41 |
evrardjp | next? | 16:41 |
andymccr | yeah that seems valid | 16:41 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs] https://review.openstack.org/403833 | 16:41 |
andymccr | yeah next! | 16:41 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643705 | 16:41 |
openstack | Launchpad bug 1643705 in openstack-ansible "Mitaka: pip_install_options break repo playbook" [Undecided,New] | 16:41 |
odyssey4me | hmm, not sure why you'd be setting force-reinstall | 16:42 |
odyssey4me | from mitaka onwards that is unnecessary | 16:42 |
evrardjp | odyssey4me: ok, invalid? | 16:43 |
odyssey4me | wait, checking something | 16:43 |
odyssey4me | BjoernT can you give some sort of rationale around using --force-reinstall ? | 16:43 |
*** javeriak has joined #openstack-ansible | 16:43 | |
evrardjp | odyssey4me: waiting for you :) | 16:45 |
odyssey4me | hmm, ok - I really don't see this as being a good idea | 16:45 |
*** jamesdenton has quit IRC | 16:45 | |
odyssey4me | the pip_install_options are meant for adjusting certs validation and proxy options | 16:45 |
odyssey4me | if we set a special option for this, we would have to default it to the value of pip_install_options anyway | 16:45 |
odyssey4me | if someone wants to --force-reinstall then they would be better served by destroying and rebuilding the container | 16:46 |
evrardjp | agreed | 16:46 |
drifterza | +1 | 16:46 |
evrardjp | seems a won't fix to me | 16:46 |
odyssey4me | if we add a special option and don't default it to the value of pip_install_options, we force our deployers to know yet another var to set | 16:46 |
evrardjp | I'll document this discussion in the bug, as usual. | 16:46 |
*** javeriak has quit IRC | 16:47 | |
evrardjp | next | 16:47 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643606 | 16:47 |
openstack | Launchpad bug 1643606 in openstack-ansible "os_keystone without database fails" [Undecided,New] | 16:47 |
odyssey4me | yep, as it stands right now I'd say won't fix - unless a really important use-case is set out | 16:47 |
evrardjp | odyssey4me: agreed | 16:47 |
skape | hey guys I'm having trouble now in the task "pip install" in the galera container I already tried pip_offline_install: true but it didn't work what is the url that the pip installer tryes to contact | 16:47 |
evrardjp | skape: could we postpone this? We are triaging bugs right now | 16:47 |
evrardjp | finishing in 13 minutes. | 16:47 |
*** dxiri_ has joined #openstack-ansible | 16:47 | |
evrardjp | so | 16:48 |
*** dxiri has quit IRC | 16:48 | |
evrardjp | next one: https://bugs.launchpad.net/openstack-ansible/+bug/1643606 | 16:48 |
odyssey4me | evrardjp just one more note on the previous bug - https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L16-L19 makes it clear what the purpose of the option is | 16:48 |
skape | evrardjp : sure sorry for the interruption | 16:48 |
evrardjp | odyssey4me: thanks for pointing that out | 16:48 |
drifterza | seems that bug is just legacy variables ? | 16:50 |
*** jwagner_lunch is now known as jwagner | 16:50 | |
*** javeriak has joined #openstack-ansible | 16:50 | |
jmccrory | did it ever work? | 16:50 |
drifterza | why would you ever not want keystone db ? | 16:50 |
odyssey4me | evrardjp jmccrory that is used by RAX's capstone project | 16:51 |
odyssey4me | lbragstad ^ | 16:51 |
*** jmckind has joined #openstack-ansible | 16:51 | |
evrardjp | oh | 16:51 |
*** haad1 has joined #openstack-ansible | 16:51 | |
odyssey4me | it's used when keystone is effectively just an API front-end with some sort of special middleware plugin to a back-end | 16:51 |
evrardjp | I am pretty sure I want to know more about it, but I'm pretty sure at the same time I don't | 16:51 |
*** haad1 has quit IRC | 16:51 | |
odyssey4me | ie no need for a DB | 16:51 |
lbragstad | odyssey4me o/ | 16:52 |
*** haad1 has joined #openstack-ansible | 16:52 | |
odyssey4me | but yeah, I think dolphm or lbragstad would have to comment and help decide what to do about it | 16:52 |
evrardjp | lbragstad: seem to be here | 16:52 |
*** jmckind_ has quit IRC | 16:52 | |
evrardjp | lbragstad: https://bugs.launchpad.net/openstack-ansible/+bug/1643606 | 16:52 |
openstack | Launchpad bug 1643606 in openstack-ansible "os_keystone without database fails" [Undecided,New] | 16:52 |
evrardjp | should we care? | 16:52 |
evrardjp | (see also conversation above) | 16:52 |
openstackgerrit | Merged openstack/openstack-ansible-os_heat: Standardize tests inventory https://review.openstack.org/400554 | 16:52 |
andymccr | perhaps we should document the reason for that setting properly? | 16:53 |
odyssey4me | yeah, I expect that changes in newton probably broke that case | 16:53 |
odyssey4me | and andymccr yes, more than likely | 16:53 |
odyssey4me | unfortunately it came in a megapatch | 16:53 |
andymccr | although i have no idea so we're gonna need lbragstad and co to patch in ;P | 16:53 |
andymccr | *pitch in haha | 16:53 |
*** paulfantom has quit IRC | 16:53 | |
evrardjp | we still have 7 minutes, and 3 bugs | 16:54 |
drifterza | go go go | 16:54 |
evrardjp | 6 minutes | 16:54 |
*** jamesdenton has joined #openstack-ansible | 16:54 | |
lbragstad | i think we used it her e- https://github.com/rackerlabs/capstone/blob/master/deploy/deploy.yml#L20 | 16:54 |
evrardjp | I'm moving to next one | 16:54 |
odyssey4me | evrardjp maybe just note the conversaiton in the bug, discuss with lbragstad afterwards | 16:54 |
lbragstad | works for me | 16:55 |
andymccr | id say confirmed and low | 16:55 |
openstackgerrit | Adam Reznechek proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC https://review.openstack.org/400940 | 16:55 |
evrardjp | ok | 16:55 |
evrardjp | next | 16:55 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643955 | 16:55 |
openstack | Launchpad bug 1643955 in openstack-ansible "Implement user-space host_vars and group_vars" [Wishlist,New] - Assigned to Nolan Brubaker (nolan-brubaker) | 16:55 |
evrardjp | confirmed? | 16:55 |
andymccr | yeah its wishlist, and it applies | 16:56 |
andymccr | confirmed! | 16:56 |
*** javeriak has quit IRC | 16:56 | |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1643680 | 16:56 |
openstack | Launchpad bug 1643680 in openstack-ansible "Shift to using dashes instead of underscores for container names" [Wishlist,New] - Assigned to Nolan Brubaker (nolan-brubaker) | 16:56 |
*** haad1 has quit IRC | 16:56 | |
drifterza | pep8? | 16:56 |
odyssey4me | I left those two as new for exposure | 16:56 |
openstackgerrit | Merged openstack/openstack-ansible-openstack_hosts: Enable openstack_hosts role without network_hosts https://review.openstack.org/403935 | 16:56 |
andymccr | didnt we just move to using underscores because of rfc issues? | 16:57 |
evrardjp | no | 16:57 |
dolphm | evrardjp: i can answer questions about capstone, but it'd be best if you just looked the other way | 16:57 |
evrardjp | dolphm: haha | 16:57 |
openstackgerrit | Merged openstack/openstack-ansible-lxc_hosts: Remove unnecessary symlinks from container cache https://review.openstack.org/404219 | 16:57 |
odyssey4me | andymccr nope, the container names use underscore, we just moved to changing the host names to use dashes | 16:57 |
odyssey4me | so now we have host names and container names that don't match | 16:57 |
evrardjp | precisely | 16:57 |
andymccr | odyssey4me: ahh ok | 16:57 |
odyssey4me | andymccr in terms of looking into the future, this is going to be a problem | 16:58 |
odyssey4me | and besides, it's confusing and we hold alot of unnecessary machinery | 16:58 |
dolphm | evrardjp: is capstone broken by something in OSA? | 16:58 |
*** Mudpuppy_ has joined #openstack-ansible | 16:59 | |
*** Mudpuppy_ has quit IRC | 16:59 | |
evrardjp | dolphm: let me finish this bug triage and talk about that :) | 16:59 |
andymccr | true. i guess id like to not pass the "fun" on to the deployers like we did with the rfc upgrade | 16:59 |
odyssey4me | it's plausible that we used underscores initially due to some deficiency in Ansible's early inventory - but I don't think that'll be an issue for us any more | 16:59 |
*** Mudpuppy_ has joined #openstack-ansible | 16:59 | |
evrardjp | I think we should be moving it higher prio | 16:59 |
evrardjp | then | 16:59 |
odyssey4me | andymccr yes, my hope would be that we can do it internally in the inventory and give a long deprecation cycle | 16:59 |
evrardjp | ok | 17:00 |
openstackgerrit | Adam Reznechek proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC https://review.openstack.org/400940 | 17:00 |
evrardjp | then let's leave it in wishlist instead of low | 17:00 |
andymccr | it should be less impactful i hope, since hostnames and the services are all correct as it stands then. | 17:00 |
odyssey4me | it's definitely a feature request, and is on palendae's radar | 17:00 |
evrardjp | ok | 17:00 |
evrardjp | good | 17:00 |
evrardjp | next one and last | 17:00 |
evrardjp | https://bugs.launchpad.net/openstack-ansible/+bug/1632025 | 17:00 |
openstack | Launchpad bug 1632025 in openstack-ansible "Liberty to Mitaka upgrade fails inside deploy-config-changes.yml" [Low,New] | 17:00 |
evrardjp | if you have 1 minute! | 17:00 |
*** TxGirlGeek has joined #openstack-ansible | 17:01 | |
odyssey4me | we've discussed this one a few times now | 17:01 |
evrardjp | wishlist at best | 17:01 |
andymccr | yeah | 17:01 |
andymccr | confirmed wishlist | 17:01 |
*** adrian_otto has quit IRC | 17:01 | |
evrardjp | ok thanks everyone! | 17:01 |
odyssey4me | not sure why you'd end up migrating twice from the same source version | 17:01 |
odyssey4me | but anyway | 17:01 |
evrardjp | asettle: where is your gif? | 17:01 |
evrardjp | odyssey4me: agreed | 17:02 |
evrardjp | ok we're done for today! | 17:02 |
odyssey4me | it might even be better to just put a guard in that stops the upgrade, saying that you've already done it | 17:02 |
evrardjp | Thanks everyone | 17:02 |
evrardjp | odyssey4me: oh you're definitely going to be fancy there | 17:02 |
*** Mudpuppy has quit IRC | 17:02 | |
odyssey4me | but, looking to the future, if we aim to use the same process to upgrade minor or major versions, then I'd like to see the 'liberty' suffix become a tag suffix or something like that | 17:03 |
odyssey4me | maybe tag + date/time stamp | 17:03 |
odyssey4me | but anyway | 17:03 |
odyssey4me | time for me to head off | 17:03 |
drifterza | yeah same | 17:03 |
drifterza | 7pm! | 17:03 |
drifterza | jeeze | 17:03 |
*** sdake_ has joined #openstack-ansible | 17:04 | |
*** sdake has quit IRC | 17:06 | |
evrardjp | dolphm: yes capstone is borked | 17:06 |
odyssey4me | dolphm maybe, not sure - but basically jmccrory tested with that one setting and stuff breaks | 17:07 |
odyssey4me | it should have been broken for newton though | 17:07 |
evrardjp | skape: TobiSan whiteveil we can now discuss your osa issues :) | 17:07 |
odyssey4me | so maybe there's more to it | 17:07 |
*** javeriak has joined #openstack-ansible | 17:07 | |
evrardjp | dolphm: in osa* | 17:07 |
odyssey4me | anyway, I'm out - this time for real real | 17:07 |
drifterza | bye bye | 17:07 |
evrardjp | odyssey4me: have a good one! | 17:07 |
evrardjp | see you tomorrow! | 17:08 |
*** asettle has quit IRC | 17:08 | |
drifterza | k I'm also out | 17:08 |
drifterza | cheers all | 17:08 |
whiteveil | heya evrardjp! Sorry again for interrupting before. Anyway I was going through the ansible role and saw in the STIG clamav is in use. In the role it’s turned off by default, but I was just wondering if anyone had any opinions on it in use on production servers | 17:09 |
*** javeriak has quit IRC | 17:09 | |
whiteveil | I’ve never really used it before, looked into it a bit and was just a little curious since it was turned off by default | 17:09 |
openstackgerrit | Merged openstack/openstack-ansible-galera_client: Allow jinja conditionals in package install tasks https://review.openstack.org/399984 | 17:10 |
evrardjp | whiteveil: mhayden could help you more with that | 17:10 |
evrardjp | he has experience has he wrote the security role | 17:10 |
evrardjp | I think there is also doc that explains why it's turned off | 17:10 |
mhayden | howdy whiteveil ;) | 17:11 |
evrardjp | maybe you should have a look at the doc at http://docs.openstack.org/developer/openstack-ansible-security/ | 17:11 |
mhayden | whiteveil: this should help -> http://docs.openstack.org/developer/openstack-ansible-security/rhel7/auto_controls-by-tag.html#misc-121-controls | 17:11 |
*** bandarji has joined #openstack-ansible | 17:12 | |
mhayden | it's disabled by default | 17:12 |
whiteveil | awesome thanks mhayden | 17:12 |
whiteveil | btw the role is amazing. I’m auditing it atm for Ubuntu and loving it so so much | 17:12 |
mhayden | also, could someone take a look at https://review.openstack.org/399174 and apply workflow if it looks good | 17:12 |
mhayden | i have a stack behind it :) | 17:12 |
mhayden | whiteveil: thanks! it's not just me working on it ;) | 17:13 |
mhayden | whiteveil: i'm really really in need of testers for the RHEL 7 stig content | 17:13 |
mhayden | 50% of the STIG is done with quite a bunch in the review pipe ;) | 17:13 |
*** adrian_otto has joined #openstack-ansible | 17:13 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Capitalize severity https://review.openstack.org/397231 | 17:13 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Enable graphical login banner https://review.openstack.org/397256 | 17:13 |
whiteveil | yep odyssey4me and another guy told me yesterday, I don’t think I’ll have time this week, but I’d love to look at it maybe this weekend | 17:13 |
mhayden | sweet | 17:14 |
openstackgerrit | Merged openstack/openstack-ansible-os_swift: Use new ansible package module to install distro packages. https://review.openstack.org/403786 | 17:16 |
*** phalmos has joined #openstack-ansible | 17:17 | |
*** chhavi has quit IRC | 17:17 | |
openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Use new ansible package module to install distro packages. https://review.openstack.org/403785 | 17:18 |
*** drifterza has quit IRC | 17:20 | |
*** Mudpuppy_ has quit IRC | 17:21 | |
openstackgerrit | Merged openstack/openstack-ansible-os_neutron: Add region awareness to the neutron ha tool https://review.openstack.org/400341 | 17:21 |
*** Mudpuppy has joined #openstack-ansible | 17:22 | |
Andrew_jedi | andymccr evrardjp : You may be happy to hear that `glance-replicator` still works. :P | 17:22 |
evrardjp | woot | 17:22 |
*** Mudpuppy has quit IRC | 17:23 | |
*** Mudpuppy has joined #openstack-ansible | 17:23 | |
*** hughmFLEXin has quit IRC | 17:24 | |
evrardjp | dolphm: should we care and fix this no db keystone? Is there a specific use case I should think of? Like RAX customers that need it? | 17:24 |
*** haad1 has joined #openstack-ansible | 17:24 | |
evrardjp | (capstone) | 17:24 |
*** dxiri_ has quit IRC | 17:25 | |
dolphm | evrardjp: capstone is only used for rackspace public cloud | 17:25 |
dolphm | evrardjp: and i've asked periodically, capstone needs to keep working (although it's using mitaka today) | 17:25 |
evrardjp | ok so we would have to fix that | 17:26 |
evrardjp | maybe worth discussing in another channel | 17:27 |
*** cbits has joined #openstack-ansible | 17:31 | |
*** weezS has quit IRC | 17:32 | |
dstanek | capstone :-) | 17:34 |
*** jlockwood has joined #openstack-ansible | 17:34 | |
*** dxiri has joined #openstack-ansible | 17:35 | |
*** McMurlock1 has quit IRC | 17:38 | |
*** dxiri has quit IRC | 17:39 | |
*** dffco has quit IRC | 17:39 | |
*** dxiri has joined #openstack-ansible | 17:39 | |
whiteveil | Is there an easy way to audit only Ubuntu rules on the role? | 17:41 |
*** javeriak has joined #openstack-ansible | 17:42 | |
*** Jack_Iv has quit IRC | 17:43 | |
*** markvoelker has quit IRC | 17:45 | |
*** javeriak has quit IRC | 17:46 | |
*** dffco has joined #openstack-ansible | 17:47 | |
*** TxGirlGeek has quit IRC | 17:48 | |
*** markvoelker has joined #openstack-ansible | 17:50 | |
*** whiteveil has quit IRC | 17:50 | |
*** TxGirlGeek has joined #openstack-ansible | 17:51 | |
*** adrian_otto has quit IRC | 17:53 | |
*** Jack_Iv has joined #openstack-ansible | 17:54 | |
*** javeriak has joined #openstack-ansible | 17:56 | |
*** paulfantom has joined #openstack-ansible | 17:57 | |
*** jperry has quit IRC | 17:59 | |
*** Jack_Iv has quit IRC | 17:59 | |
*** jperry has joined #openstack-ansible | 17:59 | |
cmart | Hi -- as a test, I'm using OSA to upgrade one of our old clouds from Liberty to Mitaka, then to Newton | 18:00 |
*** Jack_Iv has joined #openstack-ansible | 18:00 | |
cmart | I see that the instructions here http://docs.openstack.org/developer/openstack-ansible/mitaka/upgrade-guide/manual-upgrade.html#manual-upgrade have not-quite-correct playbook names. for example, instructions refer to "pip-conf-removal.yml" but I see "repo-server-pip-conf-removal.yml" instead. | 18:00 |
cmart | Is this to be expected / am I following the right guide? | 18:01 |
*** asettle has joined #openstack-ansible | 18:01 | |
*** TxGirlGeek has quit IRC | 18:02 | |
*** paulfantom has quit IRC | 18:05 | |
*** jmckind_ has joined #openstack-ansible | 18:06 | |
*** kristian__ has quit IRC | 18:06 | |
jmccrory | cmart : 'repo-server-pip-conf-removal.yml' is only in liberty (upgrading from kilo). did you initially checkout a tag on the mitaka branch? | 18:07 |
*** jmckind has quit IRC | 18:07 | |
*** TxGirlGeek has joined #openstack-ansible | 18:08 | |
*** dxiri has quit IRC | 18:09 | |
*** dxiri has joined #openstack-ansible | 18:09 | |
cmart | jmccrory, I did, it looks like I ended up on 13.2.0 | 18:11 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Add custom interfaces file and update docs for PowerVM RMC https://review.openstack.org/400940 | 18:11 |
openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Use new ansible package module to install distro packages. https://review.openstack.org/403782 | 18:12 |
cmart | although now I'm seeing that 13.3.6 is in the code, so my git repo must be way behind.. | 18:12 |
jmccrory | cmart : ok, yeah, looks like that tag is out of date for the current docs | 18:13 |
cmart | yep, My intention is to get the latest Mitaka tag. *goes to run some git commands* | 18:13 |
cmart | yep, the local copy of the repo was just old. a `git fetch --all` brought in the latest tags | 18:16 |
*** cathrichardson has quit IRC | 18:17 | |
*** cathrichardson has joined #openstack-ansible | 18:18 | |
*** cathrichardson has quit IRC | 18:18 | |
*** Andrew_jedi has quit IRC | 18:18 | |
*** vnogin has quit IRC | 18:20 | |
cmart | actually, `git checkout stable/mitaka` followed by `git pull` seemed to do the trick, before running the first commands in the doc | 18:20 |
*** haad1 has quit IRC | 18:22 | |
*** TxGirlGeek has quit IRC | 18:24 | |
*** dxiri has quit IRC | 18:25 | |
*** jmckind has joined #openstack-ansible | 18:25 | |
evrardjp | odyssey4me: andymccr it's technically possible under ubuntu to apt install python-pip, pip install pip, apt purge python-pip, apt autoremove and still have pip properly setup. It's another way to bootstrap if ppl are working in mirrored env | 18:25 |
evrardjp | it looks clean in my env | 18:25 |
*** dxiri has joined #openstack-ansible | 18:25 | |
andymccr | evrardjp: i quite like that idea if you are using a mirrored env. | 18:26 |
*** jmckind_ has quit IRC | 18:27 | |
evrardjp | I also thought of doing something different: On the deploy node that should have internet access, push the artifact for get-pip anywhere using ansible | 18:27 |
evrardjp | so you always have a good version | 18:27 |
evrardjp | and you just download it once | 18:27 |
evrardjp | then re-use locally when needed | 18:28 |
*** vnogin has joined #openstack-ansible | 18:28 | |
evrardjp | it's uglier 'though IMO | 18:28 |
evrardjp | but that would simplify quite a bit: one var in all to fetch locally instead of from the repo | 18:28 |
evrardjp | so many different approaches, maybe worth a discussion and decision | 18:29 |
evrardjp | let's talk about that tomorrow | 18:29 |
*** javeriak has quit IRC | 18:31 | |
*** dxiri has quit IRC | 18:31 | |
*** jmckind_ has joined #openstack-ansible | 18:32 | |
*** vnogin has quit IRC | 18:32 | |
*** javeriak has joined #openstack-ansible | 18:32 | |
*** dxiri has joined #openstack-ansible | 18:32 | |
*** allanice001 has joined #openstack-ansible | 18:33 | |
*** jmckind has quit IRC | 18:33 | |
*** dxiri_ has joined #openstack-ansible | 18:36 | |
*** dxiri has quit IRC | 18:36 | |
*** dffco has quit IRC | 18:37 | |
openstackgerrit | Andrew Solomon proposed openstack/openstack-ansible-openstack_hosts: Enable openstack_hosts role without network_hosts https://review.openstack.org/404380 | 18:39 |
*** jmckind has joined #openstack-ansible | 18:39 | |
*** jmckind_ has quit IRC | 18:40 | |
skape | evrardjp : thx | 18:41 |
*** Jack_Iv_ has joined #openstack-ansible | 18:41 | |
*** kristian__ has joined #openstack-ansible | 18:42 | |
skape | hagain guys I'm having trouble now in the task "pip install" in the galera container I already tried pip_offline_install: true but it didn't work what is the url that the pip installer tryes to contact | 18:42 |
skape | ?? | 18:42 |
skape | I've connected to the container and it has internet conectivity | 18:42 |
logan- | you should see the url in /etc/ansible/roles/pip_install/defaults/main.yml that it is using for the primary and fallback get-pip fetch urls | 18:44 |
*** hughmFLEXin has joined #openstack-ansible | 18:46 | |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server https://review.openstack.org/401123 | 18:46 |
*** hughmFLEXin has quit IRC | 18:47 | |
*** hughmFLEXin has joined #openstack-ansible | 18:47 | |
openstackgerrit | Andreas Jaeger proposed openstack/openstack-ansible: Fix deploy-guide conf.py https://review.openstack.org/404384 | 18:47 |
*** javeriak has quit IRC | 18:47 | |
*** javeriak has joined #openstack-ansible | 18:48 | |
*** javeriak has quit IRC | 18:48 | |
*** hughmFLEXin has quit IRC | 18:51 | |
*** Jack_Iv__ has joined #openstack-ansible | 18:52 | |
*** cathrichardson has joined #openstack-ansible | 18:52 | |
*** electrofelix has quit IRC | 18:55 | |
*** Jack_Iv_ has quit IRC | 18:55 | |
*** Jack_Iv has quit IRC | 18:56 | |
*** Jack_Iv has joined #openstack-ansible | 18:57 | |
*** Jack_Iv__ has quit IRC | 18:57 | |
*** weezS has joined #openstack-ansible | 18:58 | |
*** BjoernT has quit IRC | 18:59 | |
skape | logan- the container can access both urls , but in the error message it's trying to access the internal_lb_ip address | 18:59 |
skape | i'm running again in the moment | 18:59 |
*** jmckind_ has joined #openstack-ansible | 19:00 | |
*** Jack_Iv_ has joined #openstack-ansible | 19:00 | |
logan- | ok. would be interested to know which tag/branch you're on. also which playbook is this occurring in? | 19:01 |
*** Jack_Iv_ has quit IRC | 19:01 | |
logan- | and which container is it running against? | 19:01 |
*** Jack_Iv_ has joined #openstack-ansible | 19:01 | |
*** Jack_Iv_ has quit IRC | 19:02 | |
*** jmckind has quit IRC | 19:02 | |
*** poopcat has joined #openstack-ansible | 19:02 | |
*** Jack_Iv_ has joined #openstack-ansible | 19:03 | |
*** Jack_Iv__ has joined #openstack-ansible | 19:04 | |
*** kristian__ has quit IRC | 19:04 | |
*** Jack_I___ has joined #openstack-ansible | 19:05 | |
*** Jack_Iv_ has quit IRC | 19:05 | |
skape | ubuntu 16.04 newtow galera container | 19:06 |
*** poopcat has quit IRC | 19:06 | |
*** jmckind has joined #openstack-ansible | 19:07 | |
logan- | which url is it trying to fetch from the internal lb? can you put up a log of output from openstack-ansible -vvv when you run the play on paste.openstack.org? | 19:08 |
*** Jack_Iv__ has quit IRC | 19:09 | |
*** jmckind_ has quit IRC | 19:09 | |
*** Jack_I___ has quit IRC | 19:09 | |
logan- | have you verified that there is not an override var for pip_upstream_url in your group_vars or /etc/openstack_deploy/user_*.yml files? | 19:09 |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB 10.1 server https://review.openstack.org/401123 | 19:11 |
*** poopcat has joined #openstack-ansible | 19:18 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set lifetime limits for passwords [+Docs] https://review.openstack.org/399232 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Ensure passwords hashed with SHA512 [+Docs] https://review.openstack.org/399197 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Create home directories by default [+Docs] https://review.openstack.org/399759 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Ensure libuser crypt_style is SHA512 [+Docs] https://review.openstack.org/399199 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Expire cached sssd authenticators [+Docs] https://review.openstack.org/403833 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Verify that home directories exist [+Docs] https://review.openstack.org/399783 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Check for users w/o home dirs [+Docs] https://review.openstack.org/399749 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Apply password quality rules https://review.openstack.org/399174 | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Require auth for sudo [+Docs] https://review.openstack.org/403807 | 19:22 |
mhayden | pardon the rebasing :) | 19:22 |
mgariepy | haha | 19:22 |
mgariepy | i was wondering what was going on for a moment. | 19:22 |
mhayden | jmccrory: nice catch on the typos -- i think https://review.openstack.org/399174 is fixed up now | 19:22 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Apply password quality rules https://review.openstack.org/399186 | 19:23 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Find files/dirs without valid owners [+Docs] https://review.openstack.org/399255 | 19:23 |
openstackgerrit | Merged openstack/openstack-ansible: HAProxy extra endpoints https://review.openstack.org/404328 | 19:24 |
openstackgerrit | Merged openstack/openstack-ansible: Fix deploy-guide conf.py https://review.openstack.org/404384 | 19:24 |
mhayden | i plan to get the whoa going again in november -- october was too busy | 19:25 |
mhayden | please add stuff here: https://etherpad.openstack.org/p/whoa | 19:25 |
openstackgerrit | Nish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added metric collection plugins and kapacitor scripts https://review.openstack.org/379138 | 19:26 |
*** kjw3 has joined #openstack-ansible | 19:26 | |
skape | logan- http://paste.openstack.org/show/590873/ | 19:27 |
*** oanson has joined #openstack-ansible | 19:27 | |
skape | in the galera_container | 19:27 |
logan- | ahh I see. the galera container is trying to fetch the constraints from the repo however it is failing to reach the repo server "Failed to establish a new connection: [Errno 113] No route to host'" | 19:28 |
logan- | it seems the galera container does not have a route to reach your internal_lb_address | 19:28 |
mgariepy | is haproxy running ? | 19:29 |
skape | I cann't ping it | 19:30 |
*** TxGirlGeek has joined #openstack-ansible | 19:31 | |
*** dxiri_ has quit IRC | 19:31 | |
*** fguillot has quit IRC | 19:33 | |
*** fguillot has joined #openstack-ansible | 19:34 | |
openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: Dragonflow https://review.openstack.org/391524 | 19:34 |
skape | the service is running | 19:34 |
*** dxiri_ has joined #openstack-ansible | 19:35 | |
logan- | on your galera container, what does `ip addr list`, `ip route list` output look like | 19:35 |
mhayden | odyssey4me: fixed up jmccrory's findings in https://review.openstack.org/#/c/399174/ | 19:37 |
*** kristian__ has joined #openstack-ansible | 19:37 | |
* mhayden tips his hat to jmccrory | 19:37 | |
*** cathrichardson has quit IRC | 19:38 | |
*** kristian__ has quit IRC | 19:41 | |
*** kristian__ has joined #openstack-ansible | 19:42 | |
openstackgerrit | Omer Anson proposed openstack/openstack-ansible-os_neutron: Dragonflow https://review.openstack.org/391524 | 19:49 |
skape | the galera container has an ip on the net it seems like a problem wiht the repo container , but before I tried without pip install offline I had the same problem | 19:51 |
skape | ok the problem is in haproxy , in the repo container the requested url is accessible requirements_absolute_requirements.txt | 19:58 |
*** stuartgr has quit IRC | 19:59 | |
*** johnmilton has quit IRC | 20:02 | |
*** galstrom is now known as galstrom_zzz | 20:08 | |
raddaoui | Hey palendae, thanks for all the improvements and changes you did for the inventory, I was able to use the library for other purposes :) | 20:08 |
*** allanice001 has quit IRC | 20:09 | |
*** galstrom_zzz is now known as galstrom | 20:09 | |
*** cathrichardson has joined #openstack-ansible | 20:09 | |
*** hybridpollo has joined #openstack-ansible | 20:10 | |
*** haad1 has joined #openstack-ansible | 20:13 | |
*** Jack_Iv__ has joined #openstack-ansible | 20:14 | |
mrda | Morning OSA | 20:17 |
*** Jack_Iv__ has quit IRC | 20:17 | |
*** Jack_Iv_ has joined #openstack-ansible | 20:18 | |
*** Jack_Iv has quit IRC | 20:20 | |
*** Jack_Iv_ has quit IRC | 20:21 | |
*** Jack_Iv has joined #openstack-ansible | 20:21 | |
*** Jack_Iv_ has joined #openstack-ansible | 20:22 | |
*** Jack_Iv_ has quit IRC | 20:23 | |
mhayden | ohai mrda | 20:24 |
mrda | mhayden: o/ | 20:25 |
*** Jack_Iv has quit IRC | 20:26 | |
*** Jack_Iv has joined #openstack-ansible | 20:26 | |
*** Jack_Iv has quit IRC | 20:30 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set auditd failure flag [+Docs] https://review.openstack.org/404413 | 20:30 |
*** vnogin has joined #openstack-ansible | 20:35 | |
*** Jack_Iv has joined #openstack-ansible | 20:37 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for MFA/smartcards https://review.openstack.org/404415 | 20:38 |
TobiSan | evrardjp: im here now. you too? | 20:40 |
*** allanice001 has joined #openstack-ansible | 20:41 | |
openstackgerrit | Merged openstack/openstack-ansible: Add command to create consolidated AIO config https://review.openstack.org/392300 | 20:42 |
*** Cole has joined #openstack-ansible | 20:43 | |
*** oanson has quit IRC | 20:43 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Exception for SELinux user confinement https://review.openstack.org/404417 | 20:45 |
*** allanice001 has quit IRC | 20:46 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable usb-storage module [+Docs] https://review.openstack.org/404418 | 20:53 |
*** vnogin has quit IRC | 20:54 | |
mhayden | if any cores have a moment to review https://review.openstack.org/399174 , i'd be much obliged | 20:54 |
*** Jack_Iv has quit IRC | 20:54 | |
*** Jack_Iv has joined #openstack-ansible | 20:55 | |
*** Cole has quit IRC | 20:56 | |
*** vnogin has joined #openstack-ansible | 20:57 | |
*** cmart has quit IRC | 20:57 | |
*** cmart has joined #openstack-ansible | 20:58 | |
*** oneswig has joined #openstack-ansible | 20:59 | |
*** Jack_Iv has quit IRC | 20:59 | |
*** h5t4 has quit IRC | 21:00 | |
*** adrian_otto has joined #openstack-ansible | 21:00 | |
*** kristian__ has quit IRC | 21:00 | |
*** dxiri has joined #openstack-ansible | 21:01 | |
*** kristian__ has joined #openstack-ansible | 21:01 | |
openstackgerrit | Neill Cox proposed openstack/openstack-ansible-os_searchlight: [WIP] Import initial os_searchlight role. https://review.openstack.org/404419 | 21:01 |
*** poopcat has quit IRC | 21:01 | |
*** dxiri_ has quit IRC | 21:01 | |
*** kball has joined #openstack-ansible | 21:02 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs] https://review.openstack.org/404420 | 21:03 |
*** Mudpuppy_ has joined #openstack-ansible | 21:03 | |
*** TxGirlGeek has quit IRC | 21:05 | |
*** TxGirlGeek has joined #openstack-ansible | 21:05 | |
*** kball has quit IRC | 21:06 | |
*** adrian_otto1 has joined #openstack-ansible | 21:06 | |
*** Mudpuppy has quit IRC | 21:06 | |
*** adrian_otto has quit IRC | 21:07 | |
*** fguillot has quit IRC | 21:07 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: [Docs] Exceptions for disk encryption https://review.openstack.org/404421 | 21:08 |
*** dxiri_ has joined #openstack-ansible | 21:08 | |
*** dxiri has quit IRC | 21:09 | |
*** Mudpuppy_ has quit IRC | 21:09 | |
*** gouthamr has quit IRC | 21:11 | |
*** bandarji has left #openstack-ansible | 21:12 | |
*** poopcat has joined #openstack-ansible | 21:16 | |
*** hughmFLEXin has joined #openstack-ansible | 21:16 | |
*** sdake_ has quit IRC | 21:17 | |
*** poopcat has quit IRC | 21:18 | |
*** spotz_zzz is now known as spotz | 21:19 | |
*** TxGirlGeek has quit IRC | 21:19 | |
*** TxGirlGeek has joined #openstack-ansible | 21:20 | |
*** poopcat has joined #openstack-ansible | 21:20 | |
*** TxGirlGeek has quit IRC | 21:22 | |
*** hughmFLEXin has quit IRC | 21:23 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Enable SELinux/AppArmor [+Docs] https://review.openstack.org/404425 | 21:27 |
*** poopcat has quit IRC | 21:28 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs] https://review.openstack.org/404420 | 21:28 |
*** smatzek has quit IRC | 21:29 | |
*** sdake has joined #openstack-ansible | 21:32 | |
*** adrian_otto1 has quit IRC | 21:32 | |
*** vnogin has quit IRC | 21:33 | |
*** adrian_otto has joined #openstack-ansible | 21:33 | |
*** cbits has quit IRC | 21:33 | |
*** Jeffrey4l has quit IRC | 21:35 | |
*** kjw3 has quit IRC | 21:36 | |
*** sdake_ has joined #openstack-ansible | 21:38 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable autofs [+Docs] https://review.openstack.org/404420 | 21:39 |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Disable ctrl-alt-del key sequence [+Docs] https://review.openstack.org/404429 | 21:39 |
*** poopcat has joined #openstack-ansible | 21:40 | |
*** sdake has quit IRC | 21:41 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Enable SELinux/AppArmor [+Docs] https://review.openstack.org/404425 | 21:42 |
*** vnogin has joined #openstack-ansible | 21:45 | |
*** Jeffrey4l has joined #openstack-ansible | 21:47 | |
*** sdake has joined #openstack-ansible | 21:47 | |
*** sdake_ has quit IRC | 21:51 | |
*** wholler has joined #openstack-ansible | 21:56 | |
*** askb has joined #openstack-ansible | 21:57 | |
*** TxGirlGeek has joined #openstack-ansible | 21:57 | |
*** wholler has left #openstack-ansible | 21:58 | |
*** mando has joined #openstack-ansible | 21:59 | |
*** oneswig has quit IRC | 22:01 | |
*** smatzek has joined #openstack-ansible | 22:02 | |
*** mando has left #openstack-ansible | 22:02 | |
*** wadeholler has joined #openstack-ansible | 22:03 | |
*** smatzek has quit IRC | 22:06 | |
*** chris_hultin is now known as chris_hultin|AWA | 22:06 | |
*** sliver has quit IRC | 22:07 | |
*** TxGirlGeek has quit IRC | 22:09 | |
*** woodard_ has joined #openstack-ansible | 22:11 | |
*** woodard has quit IRC | 22:14 | |
*** vvro has quit IRC | 22:15 | |
*** woodard_ has quit IRC | 22:15 | |
*** jamesdenton has quit IRC | 22:15 | |
openstackgerrit | Major Hayden proposed openstack/openstack-ansible-security: Set auditd failure flag [+Docs] https://review.openstack.org/404413 | 22:20 |
*** Mudpuppy has joined #openstack-ansible | 22:21 | |
*** TxGirlGeek has joined #openstack-ansible | 22:23 | |
*** TxGirlGeek has quit IRC | 22:25 | |
*** Mudpuppy_ has joined #openstack-ansible | 22:27 | |
*** chas has joined #openstack-ansible | 22:30 | |
*** Mudpuppy has quit IRC | 22:31 | |
*** adrian_otto has quit IRC | 22:31 | |
*** chas has quit IRC | 22:34 | |
*** retreved has quit IRC | 22:34 | |
*** retreved has joined #openstack-ansible | 22:35 | |
*** weezS has quit IRC | 22:36 | |
*** jmckind has quit IRC | 22:37 | |
*** TxGirlGeek has joined #openstack-ansible | 22:39 | |
*** jheroux has quit IRC | 22:45 | |
*** vnogin has quit IRC | 22:46 | |
*** vnogin has joined #openstack-ansible | 22:47 | |
*** Pramod_ has joined #openstack-ansible | 22:48 | |
Pramod_ | Hi All. I am working on OSIC 66 node cluster from Rackspace. I am following the below document for deploying using ansible | 22:49 |
Pramod_ | https://github.com/osic/ref-impl/blob/master/documents/osa-refimpl-deploy.md | 22:50 |
Pramod_ | My requirement is a little different from the one which is specified in the about URL. I need 1 controller node/Network and reaming as computre nodes | 22:50 |
Pramod_ | I am facing this error | 22:51 |
Pramod_ | TASK: [haproxy_server | Create haproxy service config files] ****************** fatal: [infra01] => {'msg': 'AnsibleError: host not found: [', 'failed': True} fatal: [infra01] => {'msg': 'One or more items failed.', 'failed': True, 'changed': False, 'results': [{'msg': 'AnsibleError: host not found: [', 'failed': True}]} FATAL: all hosts have already failed -- aborting | 22:51 |
*** sliver has joined #openstack-ansible | 22:51 | |
Pramod_ | I copied the contents to ilo.csv and input.csv from osic-prep container and ran the bootstrap and even made sure that static.inventory is updated. The openstack-ansible setup-infrastructure.yml fails. and the openstack-ansible setup-openstack.yml is failing too! I would like to know if i need to update it anywhere? | 22:51 |
Pramod_ | can anyone guide me to resolve this error? | 22:52 |
*** thorst_ has quit IRC | 22:53 | |
*** chris_hultin|AWA is now known as chris_hultin | 22:53 | |
*** karimb has joined #openstack-ansible | 22:54 | |
*** vnogin has quit IRC | 22:58 | |
*** michaelgugino has quit IRC | 22:59 | |
*** vnogin has joined #openstack-ansible | 23:00 | |
*** chris_hultin is now known as chris_hultin|AWA | 23:03 | |
*** haad1 has quit IRC | 23:03 | |
*** asettle has quit IRC | 23:08 | |
*** chris_hultin|AWA is now known as chris_hultin | 23:16 | |
*** galstrom is now known as galstrom_zzz | 23:17 | |
*** jperry has quit IRC | 23:17 | |
*** phalmos has quit IRC | 23:23 | |
*** cathrichardson has quit IRC | 23:26 | |
*** cathrichardson has joined #openstack-ansible | 23:27 | |
*** TxGirlGeek has quit IRC | 23:28 | |
*** vnogin has quit IRC | 23:28 | |
*** cathrichardson has quit IRC | 23:29 | |
raddaoui | Hey Pramod_ | 23:32 |
raddaoui | so how did you configured your networks in the servers | 23:32 |
*** chris_hultin is now known as chris_hultin|AWA | 23:34 | |
raddaoui | I think you either didn't configure your network properly in the hosts | 23:34 |
raddaoui | you should change this file first /opt/osic-ref-impl/playbooks/vars/vlan_network_mapping.yml | 23:34 |
raddaoui | and then rerun the create-network-interfaces.yml playbook | 23:35 |
*** pmannidi has joined #openstack-ansible | 23:35 | |
*** rmelero has quit IRC | 23:36 | |
raddaoui | or probably you didn't list the right ips in the openstack_user_config.yml file | 23:36 |
openstackgerrit | Jimmy McCrory proposed openstack/openstack-ansible-galera_server: Install MariaDB development library package https://review.openstack.org/404475 | 23:37 |
*** dxiri_ has quit IRC | 23:38 | |
*** vnogin has joined #openstack-ansible | 23:39 | |
*** agrebennikov has quit IRC | 23:40 | |
*** vnogin has quit IRC | 23:41 | |
*** thorst_ has joined #openstack-ansible | 23:42 | |
*** bsv has quit IRC | 23:42 | |
Pramod_ | Hi Raddaoui | 23:42 |
*** bsv has joined #openstack-ansible | 23:43 | |
Pramod_ | I did change the network. Let me verify once an dget back | 23:43 |
*** vnogin has joined #openstack-ansible | 23:43 | |
*** bsv is now known as Guest7238 | 23:43 | |
*** thorst_ has quit IRC | 23:46 | |
*** Guest7238 has quit IRC | 23:48 | |
*** bsv_ has joined #openstack-ansible | 23:50 | |
*** bsv_ has quit IRC | 23:55 | |
*** Mudpuppy_ has quit IRC | 23:55 | |
*** spotz is now known as spotz_zzz | 23:55 | |
*** thorst_ has joined #openstack-ansible | 23:56 | |
*** Mudpuppy has joined #openstack-ansible | 23:56 | |
*** bsv_ has joined #openstack-ansible | 23:56 | |
*** Mudpuppy has quit IRC | 23:56 | |
*** Jack_Iv has joined #openstack-ansible | 23:57 | |
*** Mudpuppy has joined #openstack-ansible | 23:57 | |
*** thorst_ has quit IRC | 23:58 | |
*** spotz_zzz is now known as spotz | 23:59 | |
*** dxiri has joined #openstack-ansible | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!