Monday, 2016-12-12

whiteveillog rotate looks like its in effect, but i saw var/cache is full with template.dat and templates .dat-old00:00
whiteveilim assuming these are ok to remove, seems like it was from the deployment00:00
*** markvoelker has quit IRC00:02
*** javeriak has quit IRC00:07
*** May-meimei has quit IRC00:16
*** thorst has joined #openstack-ansible00:25
*** thorst has quit IRC00:26
*** thorst has joined #openstack-ansible00:27
*** thorst has quit IRC00:35
*** jlockwood has quit IRC00:47
*** Jeffrey4l has joined #openstack-ansible01:03
*** May-meimei has joined #openstack-ansible01:09
*** retreved has quit IRC01:20
*** thorst has joined #openstack-ansible01:29
*** thorst has quit IRC01:29
*** zz_pwnall1337 is now known as pwnall133701:30
openstackgerritCuong Nguyen proposed openstack/openstack-ansible: Fix test function name with two underscores to have only one  https://review.openstack.org/40957101:32
*** cuongnv has joined #openstack-ansible01:33
*** thorst has joined #openstack-ansible01:34
*** thorst has quit IRC01:39
*** sdake has joined #openstack-ansible01:51
*** sdake has quit IRC01:53
*** sdake has joined #openstack-ansible01:53
*** sdake_ has quit IRC01:54
*** sdake has quit IRC01:54
*** sdake_ has joined #openstack-ansible01:54
*** May-meimei has quit IRC02:00
*** sacharya has joined #openstack-ansible02:12
*** darrenc_ has joined #openstack-ansible02:21
*** darrenc_ has quit IRC02:21
*** sacharya has quit IRC02:24
*** thorst has joined #openstack-ansible02:36
whiteveilis there an easy way to change the default user via the sec role?02:37
*** thorst has quit IRC02:44
cloudnullu__ still around ?02:48
cloudnullwhiteveil: which things might you want to change?02:50
*** Mudpuppy has joined #openstack-ansible02:51
cloudnullall of the options that the sec role uses can be found here : https://github.com/openstack/openstack-ansible-security/blob/master/defaults/main.yml02:51
whiteveilcloudnull: looking to change the default user02:52
*** sdake_ has quit IRC02:53
cloudnullthe login user ?02:55
*** Mudpuppy has quit IRC02:55
*** markvoelker has joined #openstack-ansible03:00
whiteveilyeah03:02
*** markvoelker has quit IRC03:05
cloudnullyou can set "--user=REMOTE_USER" on the CLI03:05
whiteveilwould that work for aws as well cloudnull?03:05
cloudnullI would imagine so .03:06
cloudnullwhat is the user you want to set ?03:06
whiteveili want to change the default user for ubuntu, i think i have to modify cloud.cfg03:06
whiteveilbut not sure03:06
cloudnullI may be missing it, sorry.03:07
cloudnullso you want to change the user that which is ssh'ing into the instance ?03:08
cloudnullif so, that would all be handled in the playbook03:09
*** sdake has joined #openstack-ansible03:13
*** sdake_ has joined #openstack-ansible03:13
*** whiteveil has quit IRC03:14
*** whiteveil has joined #openstack-ansible03:15
*** whiteveil has quit IRC03:16
*** sdake has quit IRC03:17
*** weezS has joined #openstack-ansible03:21
*** whiteveil has joined #openstack-ansible03:37
*** whiteveil has quit IRC03:37
*** javeriak has joined #openstack-ansible03:39
*** thorst has joined #openstack-ansible03:42
*** thorst has quit IRC03:48
*** sdake_ has quit IRC03:48
*** May-meimei has joined #openstack-ansible03:50
*** markvoelker has joined #openstack-ansible04:01
*** markvoelker has quit IRC04:05
*** sacharya has joined #openstack-ansible04:24
*** sacharya has quit IRC04:29
*** chhavi has joined #openstack-ansible04:39
*** pramodrj07 has joined #openstack-ansible04:49
*** PramodJayathirth has joined #openstack-ansible04:49
*** rstarmer has joined #openstack-ansible04:52
*** whiteveil has joined #openstack-ansible04:53
*** markvoelker has joined #openstack-ansible05:02
*** markvoelker has quit IRC05:07
*** chhavi has quit IRC05:09
*** thorst has joined #openstack-ansible05:09
*** chhavi has joined #openstack-ansible05:10
*** thorst has quit IRC05:15
*** hybridpollo has quit IRC05:20
openstackgerritNish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added kapacitor scripts  https://review.openstack.org/37913805:22
*** sacharya has joined #openstack-ansible05:26
openstackgerritNish Patwa(nishpatwa007) proposed openstack/openstack-ansible-ops: Added interface speed plugin to telegraf  https://review.openstack.org/40886805:26
*** pwnall1337 is now known as zz_pwnall133705:28
*** sacharya has quit IRC05:30
*** Jack_Iv has joined #openstack-ansible06:00
*** markvoelker has joined #openstack-ansible06:02
*** markvoelker has quit IRC06:07
*** weezS has quit IRC06:10
*** thorst has joined #openstack-ansible06:13
*** whiteveil has quit IRC06:17
*** whiteveil has joined #openstack-ansible06:17
*** rsjethani has joined #openstack-ansible06:18
*** whiteveil has quit IRC06:18
*** whiteveil has joined #openstack-ansible06:19
*** thorst has quit IRC06:20
*** openstackgerrit_ has joined #openstack-ansible06:23
*** openstackgerrit_ has quit IRC06:25
*** openstackgerrit_ has joined #openstack-ansible06:26
*** openstackgerrit_ has quit IRC06:27
*** openstackgerrit_ has joined #openstack-ansible06:34
*** openstackgerrit_ has quit IRC06:35
*** Jack_Iv has quit IRC06:36
*** chhavi has quit IRC06:38
*** Jack_Iv has joined #openstack-ansible06:39
*** oanson has joined #openstack-ansible06:44
*** Oku_OS-away is now known as Oku_OS06:50
*** Mudpuppy has joined #openstack-ansible06:52
*** Mudpuppy has quit IRC06:57
*** yolanda has joined #openstack-ansible06:58
*** openstackgerrit_ has joined #openstack-ansible06:59
*** openstackgerrit_ has quit IRC07:00
*** fxpester has joined #openstack-ansible07:01
*** pester has joined #openstack-ansible07:03
*** markvoelker has joined #openstack-ansible07:03
*** fxpester|2 has joined #openstack-ansible07:05
*** fxpester has quit IRC07:06
*** javeriak has quit IRC07:07
*** pester has quit IRC07:08
*** markvoelker has quit IRC07:08
*** fxpester has joined #openstack-ansible07:09
*** drifterza has joined #openstack-ansible07:09
*** h5t4 has joined #openstack-ansible07:11
*** pester has joined #openstack-ansible07:11
*** fxpester|2 has quit IRC07:12
*** fxpester has quit IRC07:14
*** fxpester|2 has joined #openstack-ansible07:14
*** thorst has joined #openstack-ansible07:16
*** whiteveil has quit IRC07:16
*** pester has quit IRC07:17
*** fxpester has joined #openstack-ansible07:18
*** pester has joined #openstack-ansible07:20
*** fxpester|2 has quit IRC07:20
*** chhavi has joined #openstack-ansible07:21
*** Disova has joined #openstack-ansible07:22
*** fxpester|2 has joined #openstack-ansible07:23
*** fxpester has quit IRC07:23
*** thorst has quit IRC07:23
*** pester has quit IRC07:25
*** fxpester has joined #openstack-ansible07:25
*** sacharya has joined #openstack-ansible07:27
*** fxpester|2 has quit IRC07:27
*** pester has joined #openstack-ansible07:28
*** fxpester|2 has joined #openstack-ansible07:30
*** fxpester has quit IRC07:30
*** sacharya has quit IRC07:31
*** fxpester has joined #openstack-ansible07:32
*** pester has quit IRC07:33
*** fxpester|2 has quit IRC07:35
*** pester has joined #openstack-ansible07:35
*** fxpester|2 has joined #openstack-ansible07:37
*** fxpester has quit IRC07:38
*** pester has quit IRC07:40
*** fxpester has joined #openstack-ansible07:40
*** fxpester|2 has quit IRC07:43
*** gouthamr has joined #openstack-ansible07:43
*** pester has joined #openstack-ansible07:44
*** ianbanks has quit IRC07:44
*** rsjethani has quit IRC07:45
*** fxpester has quit IRC07:46
*** fxpester has joined #openstack-ansible07:46
*** fxpester|2 has joined #openstack-ansible07:48
*** pester has quit IRC07:49
*** fxpester has quit IRC07:51
*** fxpester has joined #openstack-ansible07:51
*** fxpester|2 has quit IRC07:54
*** pester has joined #openstack-ansible07:57
*** fxpester|2 has joined #openstack-ansible07:59
*** fxpester has quit IRC07:59
*** gouthamr has quit IRC08:00
*** pester has quit IRC08:01
*** fxpester has joined #openstack-ansible08:04
*** markvoelker has joined #openstack-ansible08:04
*** fxpester|2 has quit IRC08:06
*** pester has joined #openstack-ansible08:07
*** fxpester|2 has joined #openstack-ansible08:09
*** fxpester has quit IRC08:09
*** markvoelker has quit IRC08:09
*** fxpester has joined #openstack-ansible08:12
*** pester has quit IRC08:12
*** fxpester|2 has quit IRC08:15
*** pester has joined #openstack-ansible08:15
*** fxpester|2 has joined #openstack-ansible08:17
*** fxpester has quit IRC08:18
*** fxpester has joined #openstack-ansible08:19
*** pester has quit IRC08:20
*** fxpester|2 has quit IRC08:22
*** pester has joined #openstack-ansible08:23
*** fxpester has quit IRC08:25
*** fxpester has joined #openstack-ansible08:26
*** pester has quit IRC08:28
*** pester has joined #openstack-ansible08:29
*** pcaruana has joined #openstack-ansible08:30
*** fxpester has quit IRC08:31
*** fxpester has joined #openstack-ansible08:32
*** pester has quit IRC08:34
*** Jack_Iv_ has joined #openstack-ansible08:36
*** pcaruana has quit IRC08:37
*** pcaruana has joined #openstack-ansible08:38
*** Jack_Iv_ has quit IRC08:40
*** whiteveil has joined #openstack-ansible08:50
whiteveilis then an openstack sec ansible role for docker?08:52
whiteveillooking to harden docker containers and cant find much online08:52
*** drifterza has quit IRC09:02
*** chhavi has quit IRC09:03
*** thorst has joined #openstack-ansible09:07
*** rpittau has joined #openstack-ansible09:08
*** vnogin has joined #openstack-ansible09:12
*** thorst has quit IRC09:15
*** boogibugs has quit IRC09:19
*** pramodrj07 has quit IRC09:27
*** PramodJayathirth has quit IRC09:27
*** pjm6 has joined #openstack-ansible09:29
*** vnogin has quit IRC09:29
andymccrwhiteveil: not that im aware of! you could secure the actual hosts based on the STIG setup done in the security role, but docker containers would not usually be secured in the same way09:31
*** karimb has joined #openstack-ansible09:32
whiteveilyeah i figured, im going to create an ansible role for docker based on docker cis benchmark 1.609:32
whiteveilnot gonna be pretty but it’ll be something :P09:32
whiteveilthanks andymccr09:32
*** asettle has joined #openstack-ansible09:33
ionican somebody help me a bit with ansible? i have defined a list of in user_variables.yml the following https://paste.xinu.at/rul/ and i did a task that gets the list items and place it in a file with blockinfile https://paste.xinu.at/LwKD0p/09:40
ioniis there a way to do it better?09:40
ionii don't like the block marker09:40
*** thorst has joined #openstack-ansible09:46
openstackgerritMerged openstack/openstack-ansible: [DOCS] Updates and restructures proposed ops guide  https://review.openstack.org/40755209:46
*** uthng has joined #openstack-ansible09:50
uthngHi all09:51
uthngIs there anyone that can help me please ? odyssey4me09:51
uthng?09:51
evrardjpioni: you don't like lineinfile?09:51
uthngI amupgrading from Mitaka to Newton09:52
evrardjpioni else you could try to do a blockinfile and join the items with proper line ending, but I think it's uglier09:53
*** thorst has quit IRC09:53
uthngI got this error :  oslo_messaging.notify.messaging :Could not send notification to notifications.09:53
evrardjpioni: I guess it depends on what you need to ensure: whether it contains or it's fully containing what you want09:53
uthngACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN09:53
evrardjputhng: interesting09:54
uthngwhile it tried to do os-cinder-install09:54
ionievrardjp, so i just want to be able to have the file in sync every time i add a new network09:54
uthngAnd after searching09:54
*** electrofelix has joined #openstack-ansible09:54
uthngI found out that in the configuration cinder.conf09:54
uthngin the section : [oslo_messaging_rabbit] rabbit_use_ssl = True09:55
uthngonly this09:55
uthngfor in Mitaka version, I have a little bit informations09:55
uthngsuch as rabbit_userid, rabbit_login_password etc.09:55
evrardjputhng: do you have other information? like a proper path to the amqp cluster somewhere in your config?09:56
evrardjpYou should09:56
evrardjpIIRC09:56
uthngand in Newton, I have [oslo_messaging_notifications] section that is not in Mitaka09:56
evrardjpI'm not specialist to N upgrades yet09:56
uthngdriver = messagingv2 transport_url = rabbit://cinder:edcd74b50a5a92b34ec6df7e01ed7e873af4a8@172.29.237.19:5671//cinder [oslo_concurrency] lock_path = /var/lock/cinder09:57
evrardjpit sounds right09:57
evrardjpthanks for the password but you didn't have to :p09:57
uthnghehe09:57
uthngbeacuse copy paste hehe09:57
uthngBut it may be the cause of ACCESS_REFUSED that I got while installing os-cinder-install ?09:58
uthngMaybe you or anyone else have any idea about this change ?09:58
evrardjputhng: oh09:59
evrardjpso you got an issue in the playbook but the playbook still continued?09:59
evrardjpthat sounds bad09:59
evrardjpthat deserves a bug!09:59
evrardjpif you have your scrollback please file a bug :D09:59
evrardjpI'd like to know the conditions to trigger it too, because I think ppl already upgraded without issue10:00
evrardjpso if you could give us more details about your user variables that would be great10:00
evrardjp(or anything related to cinder)10:00
evrardjputhng: what happens when you try to run the os-cinder-install again?10:01
ionievrardjp, thanks for the hint, it seems that lineinfile is what i needed10:01
*** vnogin has joined #openstack-ansible10:02
uthngsame error10:02
evrardjpioni: it makes more sense to me, you are ensuring that line x (the item of your list) is present in your file10:02
ioniindeed10:02
evrardjpif you want to ensure full integrity of this file, it's time for you to write a template :D10:03
*** karimb has quit IRC10:03
*** Jack_Iv_ has joined #openstack-ansible10:04
*** karimb has joined #openstack-ansible10:05
*** markvoelker has joined #openstack-ansible10:06
*** vnogin has quit IRC10:06
*** chhavi has joined #openstack-ansible10:06
*** markvoelker has quit IRC10:10
evrardjpoanson: are you there?10:11
*** Jack_Iv_ has quit IRC10:16
evrardjputhng: did you file a bug I can have a look?10:18
*** whiteveil has quit IRC10:24
*** cuongnv has quit IRC10:27
*** vnogin has joined #openstack-ansible10:28
oansonevrardjp, pong10:28
evrardjpIf you don't mind I'll adapt the things a little with ppl's comments, basically doing basic ansible stuff10:29
oansonSure. I'd appreciate the help :)10:30
evrardjpthen I'd like to work with you on the tempest issues10:30
evrardjpI think it's just cosmetic changes10:30
oansonThe tempest requires sNAT or dNAT to work, right?10:30
evrardjpthen I'd like to have this documented, moreover if we simplify the variables as odyssey4me suggested10:30
evrardjpI didn't delve into the tempest errors10:31
evrardjplet's do this10:31
oansonI'm looking into the l3 agent issues. It is giving me a bit of grief.10:31
oansonI think actually tempest isn't running for dragonflow - it only runs Dragonflow's fullstack tests10:32
evrardjpFYI I filed a bug for the neutron server log, but it's not related :p10:32
evrardjpwell that's what I meant, since you're in tempest venv10:33
evrardjpoanson: do you mean you don't need tempest at all? I'm not familiar with fullstack tests10:33
evrardjpif that we can simplify the test-dragonflow-functional.yml10:34
oansonI think I'm running a test I should only run on localhost, and I run it on openstack1.10:34
oansonI need tempest for the dragonflow test-requirements10:34
*** rafael_sisweb has joined #openstack-ansible10:34
evrardjpoanson: ok10:36
oansonYes. It looks like I test for df-local-controller on openstack1, when that should only be done in localhost. I'll send a fix with the other issues10:36
evrardjpwell tempest is installed on openstack1, so maybe you want to change the target of this playbook10:36
evrardjpoanson: ok if you fix let me review this quickly then10:37
oansonI saw tempest installed in localhost too. I think I'll just remove the test - it's covered by the fullstack anyway.10:38
oansonI'll see if I can get it done today.10:38
evrardjpoanson: so you consider that the best implementation of dragonflow_pub_sub_multiproc_driver is to use zmq_pubsub_multiproc_driver by default right?10:38
evrardjpunless stated otherwise10:38
*** rafael_sisweb has quit IRC10:39
oansonYes. The other driver requires redis installation. This driver works alongside etcd (the NB DB driver) which is already installed10:39
*** rafael_sisweb has joined #openstack-ansible10:39
evrardjpok10:40
oansonIn general Dragonflow is geared towards maximum flexibility. I would like to maintain that behaviour. If someone has an external database or pub/sub driver, it should be available10:40
oansonThat will be my response for Jesse's comment too10:40
evrardjpwell we have a mechanism for that like odyssey4me suggested10:40
evrardjpbut let me comment there10:40
oansonThanks10:40
oansonevrardjp, is there anything else? Otherwise I'll go to lunch and get cracking10:42
oansonThanks again10:43
evrardjpno that's fine10:47
evrardjpI'll re-read your multiproc_enabled because it's not really super readable :p10:47
*** stuartgr has joined #openstack-ansible10:48
*** thorst has joined #openstack-ansible10:51
*** thorst has quit IRC10:58
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_swift: Remove pattern reference in service restart  https://review.openstack.org/40972911:02
*** chhavi has quit IRC11:05
*** markvoelker has joined #openstack-ansible11:07
openstackgerritMerged openstack/openstack-ansible-pip_install: Remove unnecessary package installs  https://review.openstack.org/40946811:10
*** markvoelker has quit IRC11:11
*** sdake has joined #openstack-ansible11:12
*** electrofelix has quit IRC11:21
*** karimb has quit IRC11:23
*** karimb has joined #openstack-ansible11:25
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_ceilometer: Remove Trusty support from os_ceilometer role  https://review.openstack.org/40974311:37
openstackgerritMerged openstack/openstack-ansible-os_magnum: Add /etc/environment to systemd unit  https://review.openstack.org/40868811:41
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova: Fixes incorrect variable used for ironic user name  https://review.openstack.org/40668911:43
*** fxpester has quit IRC11:45
*** pester has joined #openstack-ansible11:45
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_ceilometer: Remove Trusty support from os_ceilometer role  https://review.openstack.org/40974311:49
andymccrhmm that neutron error may be an issue, it seems to cause the neutron server to take ages to start - or at least the error matches up with timings in the logs11:55
*** thorst has joined #openstack-ansible11:56
*** karimb has quit IRC11:56
evrardjpandymccr: which one? https://bugs.launchpad.net/openstack-ansible/+bug/1648064 ?11:59
openstackLaunchpad bug 1648064 in openstack-ansible "Error "Table 'neutron.ml2_vlan_allocations' doesn't exist" in neutron server" [Undecided,New]11:59
andymccryeah11:59
andymccrjust looking at the integrated build timings11:59
andymccrceilometer is taking ages, and neutron is too - neutron is like mostly just the neutron server start11:59
evrardjpI re-pinged john on this one :D12:01
*** thorst has quit IRC12:02
openstackgerritMerged openstack/openstack-ansible: Fix test function name with two underscores to have only one  https://review.openstack.org/40957112:03
odyssey4meandymccr I've done some work to break out the lxc cache preparation from the lxc_hosts role into a role dedicated for the purpose: https://github.com/odyssey4me/lxc_cache_build/12:04
odyssey4meShall we make arrangements to get it imported into the OpenStack namespace so that we can shift over to using it?12:06
*** markvoelker has joined #openstack-ansible12:07
*** drifterza has joined #openstack-ansible12:09
openstackgerritKevin Lefevre proposed openstack/openstack-ansible-os_magnum: Add /etc/environment to systemd unit  https://review.openstack.org/40975212:11
*** karimb has joined #openstack-ansible12:11
*** markvoelker has quit IRC12:12
*** chhavi has joined #openstack-ansible12:12
andymccrodyssey4me: sure. that seems sensible12:13
*** askb has quit IRC12:14
*** Jack_Iv_ has joined #openstack-ansible12:16
openstackgerritMerged openstack/openstack-ansible-os_heat: Update paste, policy and rootwrap configurations 2016-12-10  https://review.openstack.org/40944312:18
*** Jack_Iv_ has quit IRC12:23
*** vnogin has quit IRC12:25
*** williamcaban has quit IRC12:26
*** williamcaban has joined #openstack-ansible12:26
openstackgerritAdrien Cunin proposed openstack/openstack-ansible: Process and mount default bind mounts first  https://review.openstack.org/40976812:27
*** vnogin has joined #openstack-ansible12:28
*** rstarmer has quit IRC12:30
openstackgerritMerged openstack/openstack-ansible-os_trove: Update paste, policy and rootwrap configurations 2016-12-10  https://review.openstack.org/40944412:31
*** karimb has quit IRC12:32
*** retreved has joined #openstack-ansible12:36
*** retreved has joined #openstack-ansible12:36
*** electrofelix has joined #openstack-ansible12:45
*** drifterza has quit IRC12:46
*** hw_wutianwei has quit IRC12:48
*** thorst has joined #openstack-ansible12:50
*** chhavi has quit IRC12:55
*** chhavi has joined #openstack-ansible12:57
*** johnmilton has joined #openstack-ansible12:58
*** retreved has quit IRC12:58
*** uthng has quit IRC12:59
openstackgerritAndy McCrae proposed openstack/openstack-ansible-os_cinder: Remove deprecated "shred" option for volume_clear  https://review.openstack.org/40978013:00
*** kylek3h_away has quit IRC13:01
*** karimb has joined #openstack-ansible13:07
andymccr^ that pr needs to merge for the sha bump to work :D13:07
*** retreved has joined #openstack-ansible13:12
*** markvoelker has joined #openstack-ansible13:15
*** Jack_Iv_ has joined #openstack-ansible13:20
*** Jack_Iv_ has quit IRC13:20
*** Jack_Iv_ has joined #openstack-ansible13:20
*** chhavi has quit IRC13:21
*** vnogin has quit IRC13:27
*** vnogin has joined #openstack-ansible13:32
evrardjpandymccr: looks like you got your help already13:32
evrardjp:p13:32
andymccryeah! thanks all ;D should unblock that sha bump although i see the policy updates are failing now. looking into that one13:32
*** cathrich_ has joined #openstack-ansible13:36
*** rackertom has quit IRC13:36
*** rackertom has joined #openstack-ansible13:36
*** agrebennikov_ has joined #openstack-ansible13:37
*** cathrichardson has quit IRC13:38
mhaydenhappy monday13:38
*** kylek3h_away has joined #openstack-ansible13:40
*** kylek3h_away has quit IRC13:41
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add checks for remote syslog [+Docs]  https://review.openstack.org/40759313:51
andymccrcryptography install issues again for nova :/13:55
*** karimb has quit IRC13:55
andymccrgonna get some food brb13:56
mhaydenlet's just skip encryption13:56
mhaydeni hear that speeds things up13:56
*** kylek3h has joined #openstack-ansible13:57
*** karimb has joined #openstack-ansible13:58
*** sdake has quit IRC14:02
*** oanson has quit IRC14:02
*** DanyC has joined #openstack-ansible14:03
*** DanyC has quit IRC14:03
*** sdake has joined #openstack-ansible14:03
*** Mudpuppy has joined #openstack-ansible14:06
andymccrmhayden: yeah i believe so14:06
*** yolanda has quit IRC14:11
ArchiFleKsHi, on OSA from what I understand, roles are updated based on commit hashes from a release file. But what about openstack service, they are installed from pip ? is the latest stable branch pull at each playbook run ?14:12
*** yolanda has joined #openstack-ansible14:13
ArchiFleKsfor exemple I'm now on stable/newton and i'd like to reploy nova with the latest backport14:13
evrardjpArchiFleKs: we have also files to explain what are we using14:13
openstackgerritMerged openstack/openstack-ansible-os_cinder: Remove deprecated "shred" option for volume_clear  https://review.openstack.org/40978014:13
evrardjplet me give you a link14:13
odyssey4meArchiFleKs the SHA's are pinned in these files: https://github.com/openstack/openstack-ansible/tree/stable/newton/playbooks/defaults/repo_packages14:13
odyssey4mewe update the pins every two weeks14:13
evrardjpArchiFleKs: https://github.com/openstack/openstack-ansible/tree/master/playbooks/defaults/repo_packages14:14
evrardjphaha14:14
ArchiFleKsthanks so it is the same way for roles14:14
odyssey4meyou can, if you wish, override those SHA's by setting the appropriate variables in your user_variables.yml file14:14
evrardjproles are in ansible-role-requirements.yml14:14
odyssey4meyes, for stable branches all SHA's are bumped every two weeks - then we use that for all tests for two weeks before releasing14:14
evrardjpso you can override your roles and/or override upstream14:14
*** yolanda has quit IRC14:15
*** yolanda has joined #openstack-ansible14:15
*** jheroux has joined #openstack-ansible14:16
*** lkoranda has quit IRC14:16
*** Jack_Iv_ has quit IRC14:17
*** pmannidi has quit IRC14:18
*** Matias has quit IRC14:18
ArchiFleKsthanks, are the role update and upstream update in sync with openstack-ansible release ? (like 14.0.3, etc) ?14:20
ArchiFleKsthey are both updated every two weeks ?14:20
*** electrofelix has quit IRC14:21
*** sunshine- has quit IRC14:22
*** electrofelix has joined #openstack-ansible14:23
*** Matias has joined #openstack-ansible14:23
*** pmannidi has joined #openstack-ansible14:25
*** sunshinekitty has joined #openstack-ansible14:25
*** lkoranda has joined #openstack-ansible14:26
andymccrArchiFleKs: yeah! For example the last sha bump happened 10 days ago: https://github.com/openstack/openstack-ansible/commit/e9fa2893fa6532f003bebd3e9c753b5f7dc87fb8 and the next one will happen later this week14:26
mgariepymorning everyone14:27
evrardjpmgariepy: hello14:28
*** fguillot has joined #openstack-ansible14:32
*** jamielennox is now known as jamielennox|away14:38
*** jamielennox|away is now known as jamielennox14:45
*** jheroux has quit IRC14:47
*** karimb has quit IRC14:53
*** karimb has joined #openstack-ansible14:57
*** cathrich_ has quit IRC14:57
*** cathrichardson has joined #openstack-ansible14:57
*** kstev has joined #openstack-ansible14:59
*** weezS has joined #openstack-ansible14:59
*** vnogin has quit IRC15:00
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632915:01
*** jheroux has joined #openstack-ansible15:01
*** weezS has quit IRC15:02
*** TxGirlGeek has joined #openstack-ansible15:04
-openstackstatus- NOTICE: The Gerrit service on review.openstack.org is restarting now to address acute performance issues, and will be back online momentarily.15:05
*** vnogin has joined #openstack-ansible15:05
*** whiteveil has joined #openstack-ansible15:05
evrardjpthat's it you broke it again mhayden ^15:06
evrardjpyou are really breaking all the performance15:06
evrardjpwhere is your ubuntu bug?15:07
evrardjpis it going further?15:07
*** asettle__ has joined #openstack-ansible15:08
*** asettle has quit IRC15:10
*** zz_pwnall1337 is now known as pwnall133715:11
mhaydenevrardjp: i asked for more escalation :/15:11
evrardjpthanks15:11
*** karimb has quit IRC15:12
*** maeker has joined #openstack-ansible15:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632915:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715715:18
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717815:18
*** karimb has joined #openstack-ansible15:23
*** whiteveil has quit IRC15:27
mhaydenbah, the security role gate is broken due to yum-cron rpm shenanigans15:27
*** galstrom_zzz is now known as galstrom15:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Checking gate status  https://review.openstack.org/40983315:31
*** spotz_zzz is now known as spotz15:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set user/group/modes on user init files [+Docs]  https://review.openstack.org/40873615:31
*** jwitko has joined #openstack-ansible15:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix kdump status check  https://review.openstack.org/40983315:37
*** phalmos has joined #openstack-ansible15:43
*** michaelgugino has joined #openstack-ansible15:47
*** whiteveil has joined #openstack-ansible15:51
*** weezS has joined #openstack-ansible15:53
*** jmckind has joined #openstack-ansible15:54
*** fguillot has quit IRC15:59
*** fguillot_ has joined #openstack-ansible15:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983315:59
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check newton gate  https://review.openstack.org/40984616:01
evrardjpmhayden: is there an alternative to yum-cron btw?16:02
*** vnogin has quit IRC16:02
mhaydennot that i know of at the moment16:02
evrardjpI've installed a centos recently, it was quite a change since I last did that16:02
evrardjpIt was centos 5 or 4. something at that time...16:03
evrardjpanyway, yum-cron was still there16:03
evrardjpI thought this hack was supposed to disappear16:03
mhaydenapparently not16:03
mhaydenfedora has a fairly nice config with dnf-automatic, but centos is still on yum16:03
evrardjpThanks captain16:04
mhayden(although you can add dnf to centos 7)16:04
mhaydenthat may be an option for us16:04
evrardjpoh ok16:04
evrardjpdnf sounds terrible16:04
evrardjpit sounds like "do not finish". An app that runs forever16:04
mhaydenhaha dnf is good but the acronym does sound silly16:05
andymccrmhayden: that gcc thing is impacting galera installs too :(16:05
mhaydendo we know the culprit yet?16:06
mhaydeni haven't dug into it16:06
*** h5t4 has quit IRC16:08
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: [WIP] Add CentOS support for os_ceilometer role  https://review.openstack.org/40544416:11
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Add CentOS support for os_ceilometer role  https://review.openstack.org/40544416:11
openstackgerritMarc Gariépy proposed openstack/openstack-ansible-os_ceilometer: Add CentOS support for os_ceilometer role  https://review.openstack.org/40544416:12
openstackgerritMerged openstack/openstack-ansible-os_magnum: Use common heat test playbook and vars  https://review.openstack.org/40930416:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983316:15
openstackgerritMerged openstack/openstack-ansible-os_swift: Remove pattern reference in service restart  https://review.openstack.org/40972916:16
andymccri know we had this issue in previous cycles16:16
*** Jack_Iv_ has joined #openstack-ansible16:18
andymccrif you apt-get install libffi-dev libssl-dev python-dev build-essential then it works16:20
odyssey4meandymccr is this for nova?16:21
odyssey4methat means https://review.openstack.org/409468 probably broke it - but the actual issue is that nova did not have a complete set of distro package requirements, so we should add them there16:21
odyssey4meby there I mean the os_nova role16:22
*** Jack_Iv_ has quit IRC16:22
andymccrodyssey4me: it happens in galera cluster too16:25
andymccrok so add the package reqs to galera/nova and i think ceilometer too16:25
andymccris there a reason we dont want those in the pip_install role? it seems sensible if those are required to install pip packages16:26
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983316:26
*** chris_hultin|AWA is now known as chris_hultin16:29
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [WIP] [ops-guide] Adding new content to guide  https://review.openstack.org/40985416:31
andymccrodyssey4me: cloudnull: logan- i think we should just revert that. i dont think it makes sense to install those packages in each role, and so far i know its failing for galera, ceilometer and nova - havnt tested any others.16:32
logan-hmm16:33
logan-the role gates or failing? or integrated?16:34
logan-are*16:34
andymccrlogan-: role gates16:34
openstackgerritMerged openstack/openstack-ansible: Fix main public interface name not always be eth0.  https://review.openstack.org/40949416:37
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983316:38
logan-looking at it andymccr. one thing i've noticed for example w/ galera_client is you need all of the build packages when you install the python from upstream, but when you install the wheel from our repo it doesnt complain if there are no build packages present. im wondering if the role stuff is the same way because i have integrated gates passing on my end with these packages not present16:42
andymccrlogan-: im guessing thats because we have the required packages to build the pip pkgs inside the repo server16:43
logan-correct16:43
andymccrthey get deployed as part of the repo_build role.16:43
andymccrso the other option is we need a work around for role testing16:43
logan-it seems like they don't get rebuilt when the wheel is installed16:43
andymccrperhaps16:43
andymccrwe set a var in testing repo called "pip_testing" or something, and then we only install those pkgs when testing16:44
andymccrthat way we deploy them for role testing (which we need) and dont for a full integrated build using a repo server.16:44
*** Jack_Iv_ has joined #openstack-ansible16:44
openstackgerritAlexandra Settle proposed openstack/openstack-ansible: [WIP] [ops-guide] Adding new content to guide  https://review.openstack.org/40985416:44
logan-potentially yeah. I'm not sure it belongs in pip_install. im looking at the gate log right now and one of my envs to look at where the dependency actually exists16:45
*** asettle__ is now known as asettle16:45
*** evrardjp has quit IRC16:46
*** jcannava has quit IRC16:46
*** irtermite has quit IRC16:46
andymccrlogan-: i mean it could go elsewhere... in a central test play i guess, although this is going to impact anybody not using a repo server16:47
*** evrardjp has joined #openstack-ansible16:47
*** jcannava has joined #openstack-ansible16:47
*** irtermite has joined #openstack-ansible16:47
logan-yeah16:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-plugins: Catch only debug tasks w/callback  https://review.openstack.org/40985916:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983316:50
*** pester has quit IRC16:50
*** Jack_Iv_ has quit IRC16:55
openstackgerritMerged openstack/openstack-ansible: Update all SHAs for Ocata 2016-12-10  https://review.openstack.org/40944616:58
*** pcaruana has quit IRC16:59
*** Jack_Iv_ has joined #openstack-ansible17:02
*** thorst has quit IRC17:03
openstackgerritMerged openstack/openstack-ansible: Fix default IPv6 BGP peer for BIRD  https://review.openstack.org/40920617:03
openstackgerritMerged openstack/openstack-ansible: host net config bond0 static -> manual  https://review.openstack.org/40745617:03
*** winggundamth_ has joined #openstack-ansible17:04
*** sacharya has joined #openstack-ansible17:06
*** thorst has joined #openstack-ansible17:06
*** BjoernT has joined #openstack-ansible17:07
*** Jack_Iv_ has quit IRC17:07
openstackgerritAndy McCrae proposed openstack/openstack-ansible-tests: Install required apt packages for pip builds  https://review.openstack.org/40986717:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983317:08
*** gouthamr has joined #openstack-ansible17:08
*** Oku_OS is now known as Oku_OS-away17:09
cloudnullhas anyone ran into https://bugs.launchpad.net/openstack-ansible/+bug/1649329 recently ? -cc BjoernT17:10
openstackLaunchpad bug 1649329 in openstack-ansible "14.0.3 repo build error on Ubuntu 14.04" [Undecided,New]17:10
*** pramodrj07 has joined #openstack-ansible17:10
*** PramodJayathirth has joined #openstack-ansible17:10
*** thorst has quit IRC17:10
cloudnullalso qq for folks doing things with magnum, is this change https://review.openstack.org/#/c/409752 a magnum specific change ?17:11
cloudnullmeaning do we need that change in all unit files ?17:12
logan-andymccr: i like the idea of having a build packages flag in pip_install I think. i'm going to push a patch for that in a min and maybe you can update 409867 to toggle the flag on?17:14
andymccrlogan-: sure - i think it does make sense. but im happy if people disagree with that, id rather not install bloat that isnt needed17:14
andymccrit'll make the testing repo change simpler for sure :)17:14
*** maeker has quit IRC17:15
*** whiteveil has quit IRC17:15
*** Jack_Iv_ has joined #openstack-ansible17:15
andymccrcloudnull: that bug is odd. not seen that before17:20
openstackgerritAndy McCrae proposed openstack/openstack-ansible-tests: Install required apt packages for pip builds  https://review.openstack.org/40986717:22
cloudnullandymccr: yea, IDK about that one. I'm testing a few things now.17:22
andymccrcloudnull:  its failing on the swift repo17:23
BjoernTupdated the ticket17:23
BjoernTit17:23
BjoernTit's related to the op-clone script which  lacks the swift repo17:23
cloudnullmaybe something in overrides pointing elsewhere?17:24
BjoernTno probably some issue that I don't have swift hosts in any group so it skips it there but requires it later17:24
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983317:26
BjoernTyeah the requirements_constraints.txt contains the swift repo but not the op-clone-script17:26
andymccrcloudnull: im guessing its to do with the selective repo build stuff that went in17:29
*** karimb has quit IRC17:30
andymccrBjoernT: im guessing if you set "repo_build_git_selective: False" as a var it'd work - still a bug of course, but if it's blocking you for now - would also be good to confirm if that does work17:34
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987217:35
BjoernTok let me test17:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983317:36
andymccrlogan-: don't we want that "option" to be false/no by default?17:38
andymccror set to no by default in xenial?17:39
logan-yeah maybe. we could default to no and then set it to yes in whatever roles need it or in the testing repo17:39
*** jlockwood has joined #openstack-ansible17:39
logan-the 'yes' default is just reverting to previous behavior. i don't know if thats preferred. either way works for me17:40
andymccrlogan-: i think the change to remove those package installs was correct - we shouldn't need them in containers - just on the repo_build host... i imagine thats the same for trusty/rhel? we could test that17:40
logan-trusty/rhel needs them for the SNI packages iirc17:41
andymccrlogan-: ahh ok yeah17:41
logan-installing requests requires build packages i thikn17:41
*** stuartgr has quit IRC17:41
andymccrwe cold default it to true/yes in the tests repo17:41
andymccror we could just use the revert... im not sure the best approach. if centos/trusty need it still - it still seems cleaner without it on xenial then17:42
logan-if we default it to no, the roles could switch it on here: https://github.com/openstack/openstack-ansible-os_nova/blob/master/meta/main.yml#L3417:42
logan-that would be an alternative to consider vs. setting it in the tests repo17:43
logan-well nvm i don't like that17:43
logan-it doesn't work that well because you can't turn it off in    the  integrated build17:43
BjoernTandymccr: this override worked17:44
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987217:47
*** test has joined #openstack-ansible17:48
*** test is now known as Guest3010117:48
openstackgerritMerged openstack/openstack-ansible-os_magnum: Add /etc/environment to systemd unit  https://review.openstack.org/40975217:49
*** gouthamr has quit IRC17:50
andymccrlogan-: i think the point isnt so much that nova needs it (ceilometer/galera do too) its more that you need those packages to build pip packages.- so in testing we need them17:50
andymccrin integrated we don't17:50
andymccrBjoernT: ok so that narrows down the bug17:51
logan-right andymccr17:51
andymccrbut if rhel/trusty still need it in integrated build17:51
openstackgerritLogan V proposed openstack/openstack-ansible-repo_build: Always install PIP build packages  https://review.openstack.org/40987517:51
andymccri wonder if they do need it actually...17:51
andymccrwell trusty maybe17:51
andymccrbut rhel... we never really had integrated bulids for rhel17:51
logan-i'm no sure about rhel17:51
logan-not*17:51
andymccrand we're removing trusty support moving forward anwyay17:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983317:52
*** gouthamr has joined #openstack-ansible17:52
*** gouthamr has quit IRC17:52
andymccrlogan-: is the idea there to set it to no by default, and then yes in testing?17:52
logan-yep17:53
andymccrok17:53
andymccrmakes sense to me17:53
logan-i pushed a repo_build change up there ^ to always enable it there17:53
andymccrlogan-:17:53
andymccractually17:53
andymccrrepo build already installs those (which seems fine, since it does need those packages)17:53
andymccri guess the distinction is "are we building packages locally"17:54
logan-right17:54
andymccri imagine we dont need to change the repo-build then17:54
*** Jack_Iv_ has quit IRC17:54
andymccri think lets keep it simple, set it to no by default, and in testing we'll enable it - we'll have to confirm with mgariepy on rhel though - that would be good to do17:54
logan-works for me17:54
logan-thanks andymccr17:56
*** openstack has joined #openstack-ansible18:01
logan-ah crap. commit message needs an edit because we changed the default andymccr. one sec let me do taht and also push a reno18:02
mhaydenandymccr: yeah, bumped systemd version with new return codes and yum-cron has a RPM bug :|18:03
andymccrlogan-: ahh cool yeah18:04
andymccrthanks!18:04
andymccrmhayden: :(18:04
stevelleandymccr: are we talking about those packages being needed when the role is deployed in dev mode?18:04
*** michaelgugino has quit IRC18:04
stevelleI feel like this isn't about tests per-se18:04
andymccrstevelle: yeah18:05
andymccrso those are needed if you are building the pip packages18:05
stevellethx, catching up.18:05
andymccrstevelle: feedback is 100% welcomed :)18:05
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987218:06
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983318:11
*** Guest30101 has quit IRC18:11
mhaydenit would also help if i didn't fat-finger file permissions repeatedly18:11
*** jwagner is now known as jwagner_lunch18:11
logan-at least your bluetooth doesnt skip and repeat keys.. 077718:11
mhaydenyipes18:12
mhaydeni had some fun with i915/wayland shenanigans earlier18:12
*** BjoernT has quit IRC18:13
*** thorst has joined #openstack-ansible18:13
* logan- just learned what wayland is. :P18:15
*** winggundamth_ has quit IRC18:15
*** h5t4 has joined #openstack-ansible18:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983318:16
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix systemd status and yum-cron errors  https://review.openstack.org/40983318:17
rafael_siswebhttps://www.irccloud.com/pastebin/ebwVGHf6/18:17
rafael_siswebSorry....18:18
*** Mudpuppy has quit IRC18:18
*** Mudpuppy has joined #openstack-ansible18:19
rafael_siswebGot http 500 with horizon when using brazilian language.. on horizon logs got  "AttributeError: DjangoTranslation instance has no attribute 'plural"18:19
rafael_siswebis there any way to disable multi language support on horizon? or has any fix to this "DjangoTranslation" issue?18:20
*** sacharya_ has joined #openstack-ansible18:21
*** sacharya has quit IRC18:23
*** Mudpuppy has quit IRC18:24
stevelleandymccr: I won't be offended if my -1 is overridden, btw.18:26
andymccrstevelle: so i agree with you, im just wondering where we would put it - without having to set those packages to be setup on every role when deploying packages - which is kinda why i think it goes well in the pip_install role (since it installs the bit required to install pip packages)18:28
andymccrthat way in general, with a repo server you don't need to do anything (and no bloat), but when you are not using a repo server, or in testing - you would install it.18:28
andymccrand in testing we set that var. perhaps we could intelligently calculate that var in another way?18:29
andymccrlike "if num of repo_servers > 0 and group[repo_servers] is defined (and not some override that means you can define your won repo server"18:29
logan-yeah or we could just default the build packages switch to on. im really on the fence about it too stevelle :P18:30
logan-if you did something conditional on repos ervers, i think you'd just toggle it off in the integrated build, but the switch would be defaulted to yes18:31
andymccryeah... id like the simplest/most elegant way of doing it - that avoids bloat if possible :P18:31
stevellelogan-: +1 to switch something off in the integrated build18:32
andymccrlogan-: stevelle + i can agree with that18:33
stevelleandymccr: putting it in the pip_install repo, even if it's not a total revert, could make sense18:33
stevellemake it os-dependent there18:33
stevellebbiab18:34
logan-thanks stevelle18:34
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Fix issues from new CentOS 7 release  https://review.openstack.org/40983318:35
logan-i'll change it back to default yes so we can unblock gates, and we can mull over how to effectively utilize it in the integrated repo later on18:36
mhaydenandymccr: this should go green and should fix our new CentOS 7 shenanigans -> https://review.openstack.org/#/c/409833/18:36
openstackgerritMajor Hayden proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987218:37
andymccrlogan-: sounds good to me18:38
mhaydenandymccr: fixed a tiny typo in the reno on https://review.openstack.org/409872 -- you can put your 2+1 on if you're good18:38
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987218:39
*** karimb has joined #openstack-ansible18:40
openstackgerritLogan V proposed openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987218:40
logan-thanks mhayden ^18:40
logan-:P18:41
mhaydende nada, señor18:46
mhaydenandymccr / logan-: could y'all give me a look here? https://review.openstack.org/#/c/409833/18:47
mhaydentrying to unbreak the security role gate after the centos shenanigans18:47
logan-ouch that yum-cron thing18:49
logan-nice to see the gate fail on it though.. I guess the role works!18:51
openstackgerritMerged openstack/openstack-ansible-pip_install: Conditional switch to install compiler  https://review.openstack.org/40987218:52
mhaydenlogan-: yeah, i'll have to come up with something18:53
mhaydenif you upgrade yum first, then install yum-cron, everything is okay18:54
mhaydenbut upgrading yum isn't something i'd like to be doing in the security role ;)18:54
andymccrmhayden: wow that sucks... distros :/ sigh18:55
mhaydenthanks, andymccr and logan- ;)18:56
andymccrmhayden: https://review.openstack.org/#/c/409442/1 can you remove your -1? the pip_install patch should fix it now :)18:56
mhaydenandymccr: done dir18:57
*** vnogin has joined #openstack-ansible18:57
mhaydensir18:57
*** jlockwood has quit IRC18:57
*** jwagner_lunch is now known as jwagner18:58
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Check newton gate  https://review.openstack.org/40984618:59
*** whiteveil has joined #openstack-ansible19:04
*** vnogin has quit IRC19:06
*** BjoernT has joined #openstack-ansible19:07
rafael_sisweb\exit19:08
*** rafael_sisweb has quit IRC19:09
*** rafael_sisweb has joined #openstack-ansible19:09
*** rafael_sisweb has left #openstack-ansible19:09
*** vnogin has joined #openstack-ansible19:10
*** poopcat has joined #openstack-ansible19:10
*** asettle has quit IRC19:14
openstackgerritMerged openstack/openstack-ansible-security: Fix issues from new CentOS 7 release  https://review.openstack.org/40983319:19
*** michaelgugino has joined #openstack-ansible19:24
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set home dir mode/owner/group owner [+Docs]  https://review.openstack.org/40632919:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Find world-writable dirs with bad group owners  https://review.openstack.org/40715719:25
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Set cron.allow owner/group owner [+Docs]  https://review.openstack.org/40717819:26
*** rstarmer has joined #openstack-ansible19:30
*** asettle has joined #openstack-ansible19:32
*** rstarmer has quit IRC19:44
*** rstarmer has joined #openstack-ansible19:44
*** rstarmer has quit IRC19:44
*** rstarmer has joined #openstack-ansible19:45
*** thorst_ has joined #openstack-ansible19:45
*** rstarmer has quit IRC19:45
*** rstarmer has joined #openstack-ansible19:46
*** jamielennox is now known as jamielennox|away19:46
*** rstarmer has quit IRC19:46
*** gouthamr has joined #openstack-ansible19:46
*** rstarmer has joined #openstack-ansible19:46
*** rstarmer has quit IRC19:47
*** rstarmer has joined #openstack-ansible19:47
*** rstarmer has quit IRC19:47
*** rstarmer has joined #openstack-ansible19:48
*** rstarmer has quit IRC19:48
*** thorst has quit IRC19:48
*** rstarmer has joined #openstack-ansible19:49
*** rstarmer has quit IRC19:49
*** vnogin has quit IRC19:51
*** thorst has joined #openstack-ansible19:53
*** jamielennox|away is now known as jamielennox19:53
*** Jack_Iv_ has joined #openstack-ansible19:54
cloudnullanyone feel like giving these a shove https://review.openstack.org/#/q/owner:kevin.carter%2540rackspace.com+status:open+project:openstack/openstack-ansible-ops19:55
*** thorst_ has quit IRC19:56
mhaydenlogan-: i'd like to add tests for things like https://review.openstack.org/#/c/407157/ , but i'm in a weird spot with the rhel6 and rhel7 content in there19:57
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Add checks for remote syslog [+Docs]  https://review.openstack.org/40759319:57
*** hybridpollo has joined #openstack-ansible19:57
mhaydencloudnull: i'll look19:58
cloudnulltyvm19:58
*** Jack_Iv_ has quit IRC19:59
*** rromans_pto is now known as rromans19:59
*** thorst_ has joined #openstack-ansible19:59
*** johnmilton has quit IRC20:01
*** thorst has quit IRC20:03
mhaydencloudnull: if you have a moment -> https://review.openstack.org/40872220:04
*** hybridpollo has quit IRC20:05
*** phalmos_ has joined #openstack-ansible20:07
*** phalmos has quit IRC20:10
logan-mhayden: hmm i'm confused on the rhel6/7 stuff? wouldn't it be easy to conditionally include a task file in pre/post_tasks for version specific tests20:12
mhaydenlogan-: there is, but those tests need to be rewritten a bit20:14
*** ianychoi has quit IRC20:15
mhaydenthey're a bit of a mess right now20:15
*** thorst has joined #openstack-ansible20:15
mhaydenand that's on my list to complete before ocata is done20:15
mhaydenjust trying to get feature complete first20:15
mhaydenif that makes sense20:15
*** thorst__ has joined #openstack-ansible20:16
openstackgerritMerged openstack/openstack-ansible-security: Add checks for remote syslog [+Docs]  https://review.openstack.org/40759320:17
agrebennikov_hey cloudnull are you mainly owning galera_server role?20:18
*** thorst_ has quit IRC20:18
logan-thanks mhayden20:18
*** hybridpollo has joined #openstack-ansible20:19
*** thorst has quit IRC20:19
*** thorst__ has quit IRC20:22
*** askb has joined #openstack-ansible20:25
*** thorst has joined #openstack-ansible20:25
*** maeker has joined #openstack-ansible20:25
cloudnullagrebennikov_: I've worked on that role20:30
cloudnulldid you need something with it ?20:30
agrebennikov_just a little bit20:30
agrebennikov_so if I deploy new galera node20:30
cloudnullmhayden: looking at https://review.openstack.org/408722 now20:30
agrebennikov_(actually I was adding the second one)20:31
agrebennikov_and I noticed the first server got galera restarted while the new one was not in there yet20:31
*** Jack_Iv has quit IRC20:31
agrebennikov_just wanted to know if it's intended to restart them all simultaneously?20:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: [WIP] Unblock Newton gate  https://review.openstack.org/40991320:31
agrebennikov_cloudnull, if so - galera will never come back20:31
cloudnullthe playbook does that in serial20:32
cloudnullso it should come back20:32
*** Jack_Iv has joined #openstack-ansible20:33
cloudnulladding a node into the cluster should be fairly fast however if the data set is large it can take some time to get everything replicated.20:33
openstackgerritMajor Hayden proposed openstack/openstack-ansible-security: Enable FIPS [+Docs]  https://review.openstack.org/40721820:33
*** Jack_Iv has quit IRC20:33
cloudnullalso we've constructed the glera role to assume its being run in a multi-master setup . so I'd recommend running odd numbers of nodes.20:34
*** Jack_Iv has joined #openstack-ansible20:34
openstackgerritMerged openstack/openstack-ansible-plugins: Add greater/less than tests  https://review.openstack.org/40872220:36
*** worstadmin_ has quit IRC20:37
mhaydencloudnull: thanks20:37
*** worstadmin_ has joined #openstack-ansible20:37
*** thorst has quit IRC20:38
*** worstadmin_ has quit IRC20:38
*** worstadmin_ has joined #openstack-ansible20:39
openstackgerritMerged openstack/openstack-ansible-os_nova: Update paste, policy and rootwrap configurations 2016-12-10  https://review.openstack.org/40944220:45
*** jlockwood has joined #openstack-ansible20:46
*** Jack_Iv has quit IRC20:48
*** gouthamr has quit IRC20:48
agrebennikov_cloudnull, I understand all that, what I'm asking (and you probably answered that already) is how the restart happens. Because if the playbook restarts the nodes simultaneously - galera will never come back since there will be no primary20:49
*** worstadmin_ is now known as worstadin20:49
*** worstadin is now known as worstadmin20:49
*** Jack_Iv has joined #openstack-ansible20:52
*** oanson has joined #openstack-ansible20:56
*** karimb has quit IRC20:57
*** vnogin has joined #openstack-ansible20:57
*** maeker has quit IRC20:58
*** flaviodsr has joined #openstack-ansible20:58
flaviodsrhey mrda, are you there?21:00
*** asettle has quit IRC21:06
cloudnullagrebennikov_: sorry was afk a sec21:06
cloudnullthe restart happens serially21:06
cloudnullassuming you're using the osa playbook21:06
*** dfflanders has joined #openstack-ansible21:07
cloudnullif you're consuming the role on its own it and providing more than one host it may be restarting all of the nodes in the group at the same time.21:08
cloudnullthis is the serial process https://github.com/openstack/openstack-ansible/blob/master/playbooks/galera-install.yml#L40-L4321:08
*** rstarmer has joined #openstack-ansible21:09
mrdaMorning all21:10
mrdaflaviodsr: yep, I'm here :)21:10
*** rstarmer has quit IRC21:10
flaviodsrgreat. morning mrda!21:11
flaviodsrso, about https://review.openstack.org/#/c/404273/ can you elaborate more? I did a fresh installation and ldlinux.c32 was there to copy without any other requirements21:12
*** sacharya_ has quit IRC21:12
* mrda looks21:12
*** sacharya has joined #openstack-ansible21:12
mrdaflaviodsr: what distro/version of linux did you use?21:14
flaviodsrubuntu 16.0421:14
mrdadpkg -S /usr/lib/syslinux/modules/bios/ldlinux.c3221:16
mrdasyslinux-common: /usr/lib/syslinux/modules/bios/ldlinux.c3221:16
flaviodsrmrda: in ubuntu 14.04 I agree that it does not come out of the box, however on ubuntu 16.04 it does21:16
mrdaok, so on ubuntu 16.04 that resides in syslinux-common.  That should be listed as a dependent package in vars/ubuntu-16.04.yml21:17
flaviodsrsyslinux-common is already on the requirements21:17
flaviodsryep, its already there21:17
mrdaok, just need to look at the U14.04 case21:17
* mrda continues looking21:18
*** Jack_Iv has quit IRC21:18
flaviodsrmrda: didn't osa dropped support for 14.04 on ocata?21:19
mrdaThere's still a vars/ubuntu-14.04.yml in openstack/openstack-ansible-os_ironic, so until it's proposed that it's removed we keep it up to date21:20
*** sdake has quit IRC21:20
flaviodsrk21:21
mrdaflaviodsr: Perhaps live-image-standard for U14.0421:21
mrdaalthough, I'm not sure that we need ldlinux.c32 for U14.04 based boots21:22
*** mrhillsman has quit IRC21:22
*** h5t4 has quit IRC21:22
mrdaflaviodsr: ok, so Trusty (U14.04) uses syslinux 4.05, which doesn't need ldlinux.c3221:24
mrdaflaviodsr: so your change is only applicable for U16.0421:24
mrdaflaviodsr: so perhaps make the inclusion of it conditional for U16.0421:25
mrdaflaviodsr: I'll add this info to the patch21:25
mrdaflaviodsr: thanks for your persistence :)21:25
flaviodsrmrda: great21:25
flaviodsrmrda: haha, thanks to you for the review :D21:26
*** codebauss has joined #openstack-ansible21:28
*** codebauss is now known as mrhillsman21:28
*** vnogin has quit IRC21:31
* mrda updates the review, and is glad flaviodsr has persisted21:32
*** vnogin has joined #openstack-ansible21:32
*** fguillot_ has quit IRC21:34
*** Jeffrey4l has quit IRC21:34
*** Jeffrey4l has joined #openstack-ansible21:36
*** thorst has joined #openstack-ansible21:36
*** sdake has joined #openstack-ansible21:36
*** johnmilton has joined #openstack-ansible21:36
openstackgerritOmer Anson proposed openstack/openstack-ansible-os_neutron: Implement Dragonflow deployment  https://review.openstack.org/39152421:37
*** sdake has quit IRC21:38
*** sdake has joined #openstack-ansible21:39
*** retreved has quit IRC21:40
*** thorst_ has joined #openstack-ansible21:40
*** sdake_ has joined #openstack-ansible21:41
*** thorst has quit IRC21:41
*** johnmilton has quit IRC21:42
*** retreved has joined #openstack-ansible21:42
*** thorst_ is now known as thorst21:43
openstackgerritFlávio Ramalho proposed openstack/openstack-ansible-os_ironic: Add ldlinux.c32 to the tftp directory  https://review.openstack.org/40427321:44
*** sdake has quit IRC21:44
*** retreved has quit IRC21:47
*** sdake_ is now known as sdake21:49
mrdaflaviodsr: thanks for the update, once it passes Jenkins I'll +2 it21:50
*** oanson has quit IRC21:50
flaviodsrmrda: cool, I am done for today!21:50
flaviodsrcheers!21:51
*** u__ has joined #openstack-ansible21:53
*** vnogin has quit IRC21:59
*** asettle has joined #openstack-ansible22:06
*** Mudpuppy has joined #openstack-ansible22:07
*** asettle has quit IRC22:08
*** asettle has joined #openstack-ansible22:09
*** Mudpuppy has quit IRC22:12
*** maeker has joined #openstack-ansible22:17
*** maeker has quit IRC22:17
*** maeker has joined #openstack-ansible22:17
*** vnogin has joined #openstack-ansible22:21
*** kylek3h has quit IRC22:22
*** asettle has quit IRC22:26
*** dmsimard has quit IRC22:26
*** dmsimard has joined #openstack-ansible22:26
*** dmsimard has quit IRC22:27
*** sdake_ has joined #openstack-ansible22:27
*** sdake_ has quit IRC22:27
*** dmsimard has joined #openstack-ansible22:28
*** sdake_ has joined #openstack-ansible22:28
*** dmsimard has quit IRC22:29
*** sdake has quit IRC22:30
*** thorst has quit IRC22:32
*** thorst has joined #openstack-ansible22:33
*** vnogin has quit IRC22:35
*** dmsimard has joined #openstack-ansible22:37
*** jmckind_ has joined #openstack-ansible22:39
*** jmckind has quit IRC22:40
*** thorst has quit IRC22:41
*** chris_hultin is now known as chris_hultin|AWA22:44
*** jmckind has joined #openstack-ansible22:45
*** asettle has joined #openstack-ansible22:46
*** jmckind_ has quit IRC22:47
*** asettle has quit IRC22:49
*** asettle has joined #openstack-ansible22:49
*** spotz is now known as spotz_zzz22:51
*** vnogin has joined #openstack-ansible22:52
*** asettle has quit IRC22:53
*** pwnall1337 is now known as zz_pwnall133722:55
*** jmckind has quit IRC22:59
*** jheroux has quit IRC23:01
*** vnogin has quit IRC23:06
*** vnogin has joined #openstack-ansible23:07
*** kylek3h has joined #openstack-ansible23:07
*** pmannidi has quit IRC23:07
*** pmannidi has joined #openstack-ansible23:07
*** retreved has joined #openstack-ansible23:08
*** retreved has quit IRC23:08
*** galstrom is now known as galstrom_zzz23:16
*** michaelgugino has quit IRC23:25
*** TxGirlGeek has quit IRC23:28
*** Mudpuppy has joined #openstack-ansible23:33
*** vnogin has quit IRC23:39
*** vnogin has joined #openstack-ansible23:39
*** thorst has joined #openstack-ansible23:39
*** Jack_Iv has joined #openstack-ansible23:40
*** adrian_otto has joined #openstack-ansible23:40
*** Jack_Iv has quit IRC23:44
*** thorst has quit IRC23:46
*** asettle has joined #openstack-ansible23:49
*** whiteveil has quit IRC23:51
*** u__ has quit IRC23:51
*** asettle has quit IRC23:54
*** thorst has joined #openstack-ansible23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!