Thursday, 2018-02-08

*** TxGirlGeek has quit IRC00:04
*** dim__ has quit IRC00:06
*** TxGirlGeek has joined #openstack-ansible00:08
openstackgerritMohammed Naser proposed openstack/openstack-ansible-tests master: Fix Gnocchi service URLs  https://review.openstack.org/54194600:11
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127000:12
*** pradiprwt has quit IRC00:12
*** markvoelker has joined #openstack-ansible00:17
openstackgerritAntony Messerli proposed openstack/openstack-ansible-ops master: Replace pxelinux with iPXE support in MNAIO  https://review.openstack.org/53932700:20
*** weezS has quit IRC00:20
*** markvoelker has quit IRC00:24
*** rodolof has quit IRC00:27
openstackgerritJames E. Blair proposed openstack/openstack-ansible-pip_install stable/ocata: Zuul: Remove project name  https://review.openstack.org/54195300:40
*** chyka has quit IRC00:42
*** Guy has quit IRC00:51
*** kstev1 has quit IRC00:51
*** brad[] has quit IRC01:15
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_molteniron stable/pike: Zuul: Remove project name  https://review.openstack.org/54196501:20
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127001:25
*** tux_ has joined #openstack-ansible01:30
*** weezS has joined #openstack-ansible01:33
*** TxGirlGeek has quit IRC01:36
*** Leo_m has quit IRC01:36
*** chyka has joined #openstack-ansible01:48
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127001:53
*** chyka has quit IRC01:53
*** acormier has quit IRC02:03
*** weezS has quit IRC02:13
*** rama_y has quit IRC02:26
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127002:43
*** acormier has joined #openstack-ansible02:44
openstackgerritJames E. Blair proposed openstack/openstack-ansible-apt_package_pinning stable/pike: Zuul: Remove project name  https://review.openstack.org/54199503:01
*** acormier has quit IRC03:02
*** udesale has joined #openstack-ansible03:15
mnasermhayden: i think your theory about rdo+galera is valid.  suse is working properly now for aodh but centos isn't03:26
*** woodard_ has joined #openstack-ansible03:34
*** woodard has quit IRC03:34
*** dave-mccowan has quit IRC03:39
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_glance stable/pike: Zuul: Remove project name  https://review.openstack.org/54200503:41
*** rama_y has joined #openstack-ansible04:07
*** esberglu has quit IRC04:10
*** bhujay has joined #openstack-ansible04:21
*** esberglu has joined #openstack-ansible04:26
*** weezS has joined #openstack-ansible04:27
*** esberglu has quit IRC04:30
*** dariko has joined #openstack-ansible04:35
*** weezS has quit IRC04:46
*** tux_ has quit IRC04:52
*** tux_ has joined #openstack-ansible04:53
*** tux_ has quit IRC04:58
*** tescra has joined #openstack-ansible04:59
tescrahi04:59
tescrais this branch stable  https://github.com/openstack/openstack-ansible/releases/tag/16.0.3?05:00
*** acormier has joined #openstack-ansible05:03
*** acormier has quit IRC05:07
openstackgerritJames E. Blair proposed openstack/openstack-ansible stable/ocata: Zuul: Remove project name  https://review.openstack.org/54202705:21
*** errr_ has joined #openstack-ansible05:29
*** errr_ has joined #openstack-ansible05:29
Taseerevrardjp: congress.conf is placed in /etc/congress. however, it tries to load it from /openstack/venvs/congress-untagged/etc/05:32
Taseerhow do I change it ?05:32
*** pmannidi has quit IRC05:34
*** dariko has quit IRC05:34
*** dariko has joined #openstack-ansible05:35
*** gkadam has joined #openstack-ansible05:36
*** lbragstad has quit IRC05:37
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_ironic stable/pike: Zuul: Remove project name  https://review.openstack.org/54202905:42
*** errr_ has quit IRC05:43
*** errr_ has joined #openstack-ansible05:43
*** errr_ has quit IRC05:44
*** dariko has quit IRC05:56
*** threestrands has quit IRC05:57
*** eumel8 has joined #openstack-ansible05:59
*** errr_ has joined #openstack-ansible05:59
*** errr has quit IRC06:01
*** errr_ is now known as errr06:02
openstackgerritJames E. Blair proposed openstack/openstack-ansible-openstack_hosts stable/ocata: Zuul: Remove project name  https://review.openstack.org/54203106:02
*** chyka has joined #openstack-ansible06:22
*** chyka has quit IRC06:26
*** rama_y has quit IRC06:59
*** eumel8 has quit IRC07:01
*** eumel8 has joined #openstack-ansible07:01
hwoaranggood morning07:01
*** sar has joined #openstack-ansible07:01
*** sar has quit IRC07:05
*** sar has joined #openstack-ansible07:05
hwoarangpfff, what is up with galera ...07:12
*** eumel8 has quit IRC07:28
*** ivveh has joined #openstack-ansible07:30
*** pcaruana has joined #openstack-ansible07:31
*** mardim has joined #openstack-ansible07:40
*** armaan has quit IRC07:49
*** armaan has joined #openstack-ansible07:49
evrardjphwoarang: hey07:58
evrardjpI fixed it yesterday evening07:58
evrardjpat least I thought I did07:58
evrardjplet me check07:58
evrardjpwell07:58
evrardjpworkarounded07:58
evrardjphttps://review.openstack.org/#/c/541855/07:58
*** ivveh has quit IRC07:58
evrardjpI don't know what's really wrong07:59
evrardjpbut in the meantime, we've got a workaround07:59
openstackgerritMaxime Guyot proposed openstack/openstack-ansible master: [WIP] Ceph RadosGW integration  https://review.openstack.org/51785608:02
gokhangood morning evrardjp, I am also testing your galera pacth on xenial. now it is on galera-install.yml08:02
evrardjpwhich branch?08:02
evrardjpI haven't patched the O/P yet08:03
evrardjpgokhan: if you're testing master without upgrades, that should be fine08:03
gokhanevrardjp, on pike . I thought it also should work on pike.08:04
evrardjpyeah but I got a merge conflict, you solved it?08:04
evrardjpprobably nothing too big, but hey, just saying :)08:04
*** mbuil has joined #openstack-ansible08:06
evrardjphwoarang: little question08:06
evrardjpwhat does this contain: https://github.com/openstack/openstack-ansible-galera_server/blob/stable/pike/vars/suse-42.yml#L17-L18 ?08:07
gokhanevrardjp, I manually applied your patch. and one question it tries to start mysql normally on infra1 and then failed but it is igniring this ? is this expected state ?08:07
gokhan*ignoring08:07
evrardjpgokhan: maybe, I don't know.08:07
evrardjpcheck the installed version08:07
evrardjpalso if you have .31 already installed, my patch won't fix it08:08
gokhanevrardjp, I checked it installs .30 patch08:09
evrardjpok good so that's maybe normal08:09
gokhanevrardjp, good news :) mysql startted on infra2  galera container08:11
*** chyka has joined #openstack-ansible08:11
evrardjphwoarang: do you see a problem to backport https://github.com/openstack/openstack-ansible-galera_server/commit/a37bfcca09e4cfe92f4732ae10d30b9c82f586c2 ?08:13
evrardjpif I backport it, I can fix lower branches without moving to -nv any part (either the upgrade jobs, or the suse jobs)08:14
*** olivierbourdon38 has joined #openstack-ansible08:14
*** chyka has quit IRC08:16
*** pkaralis has quit IRC08:16
*** mnaser has quit IRC08:17
hwoarangevrardjp: sorry i had to run08:17
gokhanevrardjp, galera is workedsuccessfully on pike with your patch.08:18
*** mnaser has joined #openstack-ansible08:18
hwoarangevrardjp: so the repo contains the mariadb/galera packages but that's only for pike08:18
hwoarangin queens i removed that and i added the mariadb.org upstream repos08:18
hwoaranglike centos08:18
hwoarangevrardjp: so if you want to backport that in pike then i am fine with it08:18
hwoarangevrardjp: this is not quite right for suse https://review.openstack.org/#/c/541855/308:20
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_server stable/pike: Prevent latest mariadb version  https://review.openstack.org/54208308:23
evrardjphwoarang: https://downloads.mariadb.com/MariaDB/mariadb-10.1.30/yum/08:24
hwoaranghmm that's new...08:24
evrardjpwell I had two questions basically08:24
evrardjpwell that's not documented08:24
evrardjpthat's a completely different repo08:24
evrardjpit has archives08:24
evrardjpso I thought it made sense to use it, for closer matching08:25
evrardjpI can use sles 1208:25
evrardjpthat was my first question08:25
evrardjpmy second question is what does obs contain08:25
*** peri has joined #openstack-ansible08:25
evrardjpif it contains only .30 we don't need to backport that massive change here https://review.openstack.org/#/c/542083/08:25
*** eumel8 has joined #openstack-ansible08:25
hwoarangobs contains 10.208:25
evrardjpok08:25
hwoarangtomorrow maybe 10.308:25
hwoarangit's a moving target08:26
evrardjpok so it's probably best to stick with my change in stable/ branches.08:26
hwoarangyes but the backport of the a37bfcca09e4cfe92f4732ae10d30b9c82f586c2 has to happen before your change08:26
evrardjpit's included08:26
evrardjphave a look at my link08:27
evrardjpIt would be nice of you to review at least the pike one08:27
evrardjpthat's until we fix it in non-emergency mode08:27
hwoaranghmm what link?08:27
hwoarangwait before i am mixing things08:28
evrardjphttps://review.openstack.org/#/c/542083/08:28
hwoarang*because08:28
evrardjpso master I just changed the url08:28
hwoarangah yes08:28
evrardjpPike I changed the url + backport of the using url08:28
evrardjpand we can merge this from O onwards.08:29
evrardjpthis way upgrades are not broken08:29
hwoarangdo you know what this downloads.mariadb repo is for?08:29
evrardjpwhat do you mean?08:29
hwoarangwhy downloads.mariadb instead of yum.mariadb repo?08:29
evrardjphttps://mariadb.com/downloads/mariadb-tx08:29
hwoarangthe domain has changed so i was just curious08:29
evrardjpthe domain hasn't changed08:30
evrardjpthat's the deal08:30
evrardjpwell08:30
evrardjpyou now have 2 places08:30
evrardjpthey recommand to use yum. blabla to have always the latest with the package manager08:30
evrardjpbut I saw the url on the page https://mariadb.com/downloads/mariadb-tx08:30
evrardjpjust digged a little deeper08:30
hwoarangi see08:31
evrardjp(see also: https://downloads.mariadb.org/mariadb/repositories/#mirror=nucleus&distro=CentOS&distro_release=centos7-amd64--centos7&version=10.1 )08:31
evrardjpas you can see, by default everything point out to yum.08:32
evrardjpyum.blabla08:32
evrardjpbut it doesn't prevent the other url for being accessible and being a yum repo08:32
hwoarangright08:32
evrardjpand be frozen08:32
hwoarangok lets roll with it08:32
evrardjpon top of that08:33
evrardjpok08:33
evrardjpI'll fix the root cause asap08:33
evrardjpthanks for the help08:34
hwoarangi wonder if the breakage in 10.1.31 is known upstream08:34
hwoarangthank you for the backport08:34
hwoarangevrardjp: could you get https://review.openstack.org/#/c/538933/ in please?08:35
hwoarangand this is no longer necessary https://review.openstack.org/#/c/541417/ it seems.08:36
hwoarangsomehow the original layout of the dir was restored08:36
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_server stable/ocata: Prevent latest mariadb version  https://review.openstack.org/54209008:37
evrardjphwoarang: it's maybe not an upstream bug, but our things. But because it will take time to properly investigate, I think it's better we release a fix asap08:38
hwoarangagreed08:38
*** gillesMo has joined #openstack-ansible08:38
evrardjpthis way ppl are not wondering what's going on, we can just say: Use the latest version08:39
evrardjphwoarang: done08:40
hwoarangawesome thanks!08:40
*** tnogisto has quit IRC08:40
evrardjphwoarang: could you vote on https://review.openstack.org/#/c/542090/1 ?08:42
hwoarangok08:43
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone master: Test keystone with a memcached pool  https://review.openstack.org/54000108:49
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_rally master: Reinitialize the virtualenv  https://review.openstack.org/53582208:50
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_rally master: Updated from global requirements  https://review.openstack.org/53506908:51
*** vnogin has quit IRC08:51
openstackgerritMerged openstack/openstack-ansible-ops master: Ability to skip security hardening tags in leap  https://review.openstack.org/54105709:02
openstackgerritJames E. Blair proposed openstack/openstack-ansible-ops stable/newton: Zuul: Remove project name  https://review.openstack.org/54209609:02
*** hw_wutianwei has quit IRC09:07
*** hw_wutianwei has joined #openstack-ansible09:08
*** rodolof has joined #openstack-ansible09:14
*** SmearedBeard has joined #openstack-ansible09:22
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_gnocchi stable/pike: Zuul: Remove project name  https://review.openstack.org/54210309:23
*** armaan has quit IRC09:23
*** armaan has joined #openstack-ansible09:24
*** ivveh has joined #openstack-ansible09:32
*** SmearedBeard has quit IRC09:41
odyssey4medim_ idlemind that problem is known and was fixed recently - see https://review.openstack.org/#/q/Ic39f884016a6ba0498110267027783001a087a1c09:46
*** SmearedBeard has joined #openstack-ansible09:47
*** tnogisto has joined #openstack-ansible09:47
evrardjpodyssey4me: what about the ocata thing, you have logs that can help now?09:48
odyssey4meevrardjp not sure - will look into it later today09:52
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249109:52
odyssey4meevrardjp you'll likely need to also do patches for the galera_client role, otherwise you'll have two different repositories?09:52
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-os_keystone master: Test keystone with a memcached pool  https://review.openstack.org/54000109:54
evrardjpodyssey4me: yup, I think it's a good idea to have client version and server version identical, while not mandatory09:59
evrardjpalso I don't pin for centos and suse, which could lead to issues.09:59
odyssey4mewell, the repo you're using is effectively a pin09:59
odyssey4meoh - you mean you don't remove the newer version if it's there?10:00
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_client master: Prevent latest mariadb version  https://review.openstack.org/54211910:08
evrardjpodyssey4me: we don't10:08
odyssey4meevrardjp I need https://review.openstack.org/541457 for the ocata debugging10:08
evrardjpodyssey4me: is that a backport?10:09
odyssey4meevrardjp it's not possible to do a cherry-pick as there have been too many changes in the later branches10:09
evrardjpok10:10
odyssey4meso, as stated in the commit message, I did a copy-paste and cleaned stuff out10:10
evrardjpso I have to review it10:10
*** stuartgr has joined #openstack-ansible10:11
odyssey4meI also need https://review.openstack.org/541443 ported back - perhaps if hwoarang reviews and is happy then I can port it back before merge (due to the mariadb nonsense)?10:11
evrardjpodyssey4me: this starts to be a tangled mess.10:14
evrardjpWhat if we make the upgrade jobs optional in mariadb, so we can merge things properly in galera_server, so we can fix the whole master for inclusion of things10:14
evrardjpthen we can backport all what's not emergency10:15
evrardjpofc the galera_client and galera_server would have to be merged in priority in all branches to prevent deployers from installing a wrong version10:15
hwoaranghmm10:15
evrardjpor we stop the emergency fixes, and we try to find out what's wrong in that new version10:16
evrardjpI'd say we should ship in the emergency workarounds as fast as possible, to let us the time10:17
hwoarangmaybe it's easier to just disable the upgrade jobs for now10:17
evrardjphwoarang: agreed.10:17
evrardjpLet me do it then in my patch real quick.10:17
odyssey4meyeah - disable the upgrade tests temporarily (it looks like we're upgrading 10.1->10.1 anyway?) to get the changes merged, update the integrated repo with those changes so that people can use them10:17
odyssey4mehwoarang are you able to look into or find out whether this is a known upstream bug10:18
odyssey4mewhile evrardjp implements the pinning to get us by10:18
hwoarangodyssey4me: i am in a meeting now so i will check a bit later. i also need to see the galera logs maybe there is sometihng obvious there10:19
openstackgerritMerged openstack/openstack-ansible-tests master: Add os_gnocchi role to required projects  https://review.openstack.org/54190210:19
*** hw_wutianwei has quit IRC10:22
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_server stable/pike: Prevent latest mariadb version  https://review.openstack.org/54208310:22
*** hw_wutianwei has joined #openstack-ansible10:22
openstackgerritJames E. Blair proposed openstack/openstack-ansible-rabbitmq_server stable/ocata: Zuul: Remove project name  https://review.openstack.org/54212010:23
odyssey4meevrardjp a bit of a nit, but perhaps the commit subject should be clearer about the version it's preventing given that it's one form of changelog? 'latest' doesn't really carry much meaning10:23
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_server master: Prevent latest mariadb version  https://review.openstack.org/54185510:23
evrardjpodyssey4me: well it prevents ALL the latests in the future, because now it effectively freezes10:24
evrardjpand on top of that it also prevents a certain package.10:24
odyssey4meyes, but we're going to undo that once we've figured out the root cause and resolved that, right?10:24
evrardjpso I guess yes I could change10:24
evrardjpmmm I don't know, I guess we'll have to see10:25
evrardjpI'd undo for master branch10:25
odyssey4meor are you thinking of maintaining this pin forever?10:25
evrardjpuntil we find out the root cause, I'd say keep the pin10:26
evrardjpwhen root cause found, remove the pin, keep the freeze10:26
evrardjpmaybe update the version10:26
evrardjpminor version*10:26
odyssey4meyet another thing to maintain - fun times10:26
evrardjpyeah, but it's properly frozen10:27
odyssey4meI think it's high time we revisit our pinning/freezing strategy to make it less of a burden10:27
evrardjpwe already have as part of the cycle to bump upstream things10:27
evrardjpI think there is no point of this discussion while we are in emergency mode10:28
odyssey4mewe actually use to freeze it like that - can't recall which series... we stopped doing it because freezing is still an option for deployers, and they can maintain their freeze10:28
odyssey4meanyway, your call - as you say, we need it now to get us over the hump10:28
evrardjpwell you're right it doesn't make sense, we are freezing almost everything, and this one doesn't get freezed, so yes, what is the strategy10:29
evrardjp?10:29
evrardjpTo be decided at the ptg.10:29
evrardjpDocument the strategy at that time10:29
evrardjpupdated the etherpad with this as a proposed session10:31
*** vnogin has joined #openstack-ansible10:32
evrardjpok I will focus on backporting the galera_client for now10:34
evrardjpwe can decide later what we do depending on the results of the investigation10:34
*** vnogin has quit IRC10:35
openstackgerritMerged openstack/openstack-ansible-galera_server stable/ocata: Prevent latest mariadb version  https://review.openstack.org/54209010:35
hwoarangodyssey4me: for example here is a 10.1.31 regression https://jira.mariadb.org/browse/MDEV-1523010:37
hwoarangnot sure if it's the same i am still deploying to get logs10:37
*** hw_wutianwei has quit IRC10:42
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_client stable/pike: Prevent latest mariadb version  https://review.openstack.org/54212510:43
*** Smeared_Beard has joined #openstack-ansible10:45
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_client stable/ocata: Prevent latest mariadb version  https://review.openstack.org/54212710:46
*** SmearedBeard has quit IRC10:47
evrardjpthey are all under the same topic10:47
*** vnogin has joined #openstack-ansible10:47
evrardjpI'll then quickly bump the a-r-r when merged10:48
evrardjphwoarang: are you working on finding the root cause?10:48
evrardjpI will tackle that too10:49
hwoarangevrardjp: not yet10:50
*** hw_wutianwei has joined #openstack-ansible10:50
eumel8https://bugs.launchpad.net/openstack-ansible/+bug/174762910:55
openstackLaunchpad bug 1747629 in openstack-ansible "A worker was found in dead state" [Undecided,New]10:55
eumel8I tested some more ansible versions but had no much progress or ideas10:56
openstackgerritMerged openstack/openstack-ansible-tests stable/ocata: Update role test log collection  https://review.openstack.org/54145711:02
odyssey4meeumel8 We've seen that when the deploy node runs out of memory. Ansible just bails out.11:07
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible-galera_client stable/pike: Prevent latest mariadb version  https://review.openstack.org/54212511:09
odyssey4meevrardjp it may be best to add a reno to inform people that for OSA versions x and before, a variable override should be implemented for mariadb to work11:13
odyssey4meunfortunately we're introducing a new variable which will cause that override to break from the next release onwards - so perhaps we should rethink the addition of a new variable?11:15
*** olivierbourdon38 has quit IRC11:17
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249111:17
evrardjpodyssey4me: not sure what you mean11:17
odyssey4meevrardjp well, in all released versions of OSA mariadb will now hang when creating the cluster, right?11:17
evrardjphwoarang: I got issues on suse changes for Pike on galera_server. Seems issue to start mariadb11:17
odyssey4meso we should inform our user base via a reno how to work around that11:18
*** Guy has joined #openstack-ansible11:18
evrardjphttp://logs.openstack.org/83/542083/2/check/openstack-ansible-functional-opensuse-423/01c098a/logs/openstack/container1/YaST2/config_diff_2018_02_08.log.txt.gz shows a difference with config file, maybe there are interesting things to read there11:18
eumel8odyssey4me: I know. But it wouldn't go better with a newer ansible version11:18
evrardjpodyssey4me: yes11:19
odyssey4meeumel8 nope, we pin the ansible major.minor for each series because things break every release11:19
evrardjpProbably adding a known issue in the integrated repo, with the existing vars to override.11:19
odyssey4meeumel8 also, with each release the memory consumption is growing - not shrinking11:19
hwoarangevrardjp: ok will look at it11:19
evrardjphwoarang: thanks11:19
hwoarangevrardjp: but for pike we also need this https://github.com/openstack/openstack-ansible-galera_server/commit/baa97f1df2035e2db969152f64b28b791e25d3d911:20
hwoarangi think that's the reason11:20
evrardjpodyssey4me: eumel8 the problem is for the translations deploy, because we deploy many components, and therefore the inventory is big.11:20
odyssey4meah11:20
evrardjpwe could probably put things into the same host, to converge more.11:20
hwoarangevrardjp: but the backport is not clean it needs some manual conflict resolution11:20
odyssey4mehwoarang if the backport isn't clean, perhaps there are some other patches missing too?11:21
evrardjphwoarang: I knew you'd be the expert!11:21
hwoarangodyssey4me: yeah there are some fixes by cloudnull that improve systemd stuff11:21
hwoarangbut that's very invasive11:21
hwoarangit's prob easier to resolve conflicts11:21
odyssey4meah ok11:21
hwoarangit's the private device thing that breaks the service on suse11:21
evrardjp... I see.11:22
hwoarangevrardjp: i can take over that pike patch11:22
evrardjpeumel8: I wanted to run all of this on metal, but I am blocked for now.11:22
odyssey4meevrardjp lemme pick up that all metal patch to resolve the final issues and new ones which have popped up11:23
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_heat stable/newton: Zuul: Remove project name  https://review.openstack.org/54213911:23
evrardjpok I will issue the release note for each branch and find out why galera fails with latest version.11:24
eumel8evrardjp: related to translation deploy: something where I can help? We have still the plan to install translation checksite with OSA: https://review.openstack.org/#/c/487936/11:27
hwoarangevrardjp: can i modify https://review.openstack.org/#/c/542083/ ?11:32
*** hw_wutianwei has quit IRC11:33
*** hw_wutianwei has joined #openstack-ansible11:34
*** hw_wutianwei has quit IRC11:36
openstackgerritJean-Philippe Evrard proposed openstack/openstack-ansible master: Document known issue with galera 10.1.31  https://review.openstack.org/54214411:42
evrardjphwoarang: yes please do11:42
evrardjpeumel8: yes I will focus on this, it's important for us11:43
openstackgerritJames E. Blair proposed openstack/openstack-ansible-rsyslog_client stable/newton: Zuul: Remove project name  https://review.openstack.org/54214511:43
evrardjpeumel8: I am testing on my machine on a regular basiss11:44
evrardjpI don't have the same issues, because I have more ram though11:44
evrardjpbut I am making sure it's deploying fine. To be honest, I haven't run the test the last week or so.11:44
evrardjplast test was Thursday 25 January 2018  17:59:37 +0000. Working perfectly.11:45
evrardjpso yes I can strip down the machine for ram requirements11:45
evrardjpeumel8: or if there are components that don't need deploying anymore, that would be fine too, I can remove them from the deployment build11:45
evrardjpeumel8: do you know if the scope has changed?11:46
*** taseer1 has joined #openstack-ansible11:46
evrardjp(this way I know HOW far I can strip down things)11:47
*** Taseer has quit IRC11:47
*** taseer2 has joined #openstack-ansible11:47
*** chyka has joined #openstack-ansible11:47
eumel8evrardjp: I tested also and saw sahara is consuming ram and cinder, especially cinder-backup runs with 100% cpu for a while.11:48
*** hamzy_ is now known as hamzy11:50
eumel8strip down is a good  choice, on the other hand we want to test all translatable stuff11:50
*** hw_wutianwei has joined #openstack-ansible11:51
*** taseer1 has quit IRC11:51
*** chyka has quit IRC11:52
evrardjpeumel8: that's true. But I was wondering if there were things not to translate anymore -- unfollowed projects or things like that. If it's not the case, we'll just make the deploy more efficient.11:54
evrardjpmost of the time I see things running weird after octavia11:54
evrardjphappening in rsyslog11:54
eumel8evrardjp>: sahara-dashboard we have a good translation progress. so it's would be worth to keep in11:54
evrardjpso I was wondering if that wasn't an octavia thing11:54
eumel8will look...11:54
evrardjpI will try something this afternoon -- mixing both scenarios to put more things on metal, see how it goes. Trove wouldn't be one of them, but collocation can happen.11:56
eumel8evrardjp: octavia-dashboard is mostly done. 100% translated in Japanese. German, Korean.11:57
eumel8so no new content is this release. it would be a candidate11:57
evrardjpYOu need ppl for translating into french?11:58
eumel8evrardjp: in french it's empty. feel free ;)12:01
evrardjphaha let's discuss that later. But yeah, why not. I know a few ppl that could possibly help.12:03
eumel8evrardjp: new people are still required as long the AI programming is not ready yet :)12:05
evrardjpwe're closer everyday.12:06
evrardjp:D12:06
eumel8for normal text it's ready but in the OpenStack world are a lots of strings and words where the AI is going nuts. We have to work on it, but it's a nice use case for the new technology12:10
*** dave-mccowan has joined #openstack-ansible12:11
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-galera_server stable/pike: Prevent latest mariadb version  https://review.openstack.org/54208312:15
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249112:17
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-galera_server stable/pike: Prevent latest mariadb version  https://review.openstack.org/54208312:27
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement a scenario with no containers  https://review.openstack.org/50422412:28
*** hw_wutianwei has quit IRC12:28
*** hw_wutianwei has joined #openstack-ansible12:28
odyssey4mehwoarang if you have a minute to spare, would you mind taking a peek at https://review.openstack.org/541443 please?12:31
odyssey4meevrardjp mind if I tweak https://review.openstack.org/#/c/542144/1/releasenotes/notes/mariadb-10.1.31-package-issue-5889d1b7940489f1.yaml a bit?12:32
*** SerenaFeng has joined #openstack-ansible12:34
odyssey4meevrardjp also, mind if I propose a reno per branch as it will give better visiblity... this reno will only be published into queens12:34
evrardjpodyssey4me: I don't mind its edition, and I planned to double check per branch12:35
evrardjpI just wanted to wait a little for validation12:35
odyssey4merealistically speaking, this doesn't need to go into master - only the stable branches12:36
odyssey4memaster is not yet released, and we'll have this fixed by release12:36
evrardjpodyssey4me: that's fairly true!12:36
odyssey4meso mind if I use this as a basis to submit reno's into each stable branch then?12:36
*** foutatoro has joined #openstack-ansible12:37
odyssey4meI'd rather you spent time figuring out the root cause and fixing it, than have you fiddle with that stuff.12:37
*** vnogin has quit IRC12:39
*** vnogin has joined #openstack-ansible12:40
*** tux_ has joined #openstack-ansible12:40
hwoarangodyssey4me: done12:42
odyssey4methanks hwoarang12:43
*** chhagarw has joined #openstack-ansible12:44
foutatorohi I run into this error http://paste.openstack.org/show/666490/  when deploying openstack (stable/ocata)12:46
foutatoroSomebody knows why does setup-infrastructure.yml not install rabbitmq ?12:46
*** olivierbourdon38 has joined #openstack-ansible12:49
odyssey4mefoutatoro setup-infrastructure failed - you need to see why that is, without the infra in place you can't setup openstack yet12:52
evrardjpfoutatoro: your repo failed12:53
odyssey4mefoutatoro it looks like the repo build may have failed, so try this: openstack-ansible repo-install.yml -e repo_build_git_reclone=yes -e repo_build_wheel_rebuild=yes -e repo_build_venv_rebuild=yes12:53
odyssey4meonce that succeeds, re-run setup0infrastructure12:53
foutatoroodyssey4me: Can I use the default user_variable or do I set "repo_build_pip_extra_indexes" and "uca_apt_repo_url" variable as in AIO deployment12:55
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement a scenario with no containers  https://review.openstack.org/50422412:57
*** SerenaFeng has quit IRC12:57
odyssey4mefoutatoro you do not have to override any defaults, unless you're testing in a restricted environment where you cannot access public mirrors12:57
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_swift stable/newton: Zuul: Remove project name  https://review.openstack.org/54216213:04
hwoarangodyssey4me: evrardjp: suse+pike is ok in https://review.openstack.org/542083 please get it in :) TIA13:05
*** vnogin has quit IRC13:09
mhaydenhappy thursday13:18
mhaydenor friday eve13:18
*** woodard_ has quit IRC13:20
*** woodard has joined #openstack-ansible13:20
mhaydenhwoarang: i gave the patch an extra +2 to show the gate that we're really serious13:21
hwoaranghehe13:21
mhaydeni couldn't figure out the mariadb problem yesterday13:22
mhaydenthe receiver was all set up and ready to get data13:22
mhaydenbut the donor never figured out "hey, i'm the donor, i should send data"13:22
mhaydenso the receiver got bored and took a walk13:23
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_rally stable/newton: Zuul: Remove project name  https://review.openstack.org/54217813:24
odyssey4meI'm wondering whether there may be an issue with the xtradb version we're using, or whatever it is that facilitates the SST?13:26
evrardjpmhayden: it's sst13:29
mhaydenah okay13:29
evrardjpmhayden: using galera_wsrep_sst_method: rsync indeed fixes the issue, so I am digging deeper13:29
mhaydenwell at least that digging allowed me to find the issue with centos repo priorities for mariadb13:29
mhaydenso that's a positive thing13:30
evrardjpas you can see https://mariadb.com/kb/en/library/mariadb-10131-changelog/ lots of changes in sst13:30
evrardjpyeah that's good, thanks for checking13:30
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_server master: Set proper yum repo priority on CentOS 7  https://review.openstack.org/54192413:32
mhaydenevrardjp: ^^ centos fix13:32
*** bhujay has quit IRC13:33
*** bhujay has joined #openstack-ansible13:38
mgariepymorning13:39
odyssey4memhayden if those yum repository changes aren't required any more - shouldn't we be removing the reno's ?13:41
mhaydenpossibly -- which renos?13:42
*** hamza21 has joined #openstack-ansible13:42
odyssey4memhayden the ones we merged yesterday13:43
odyssey4mehttps://review.openstack.org/#/q/I5f1ecb71c6125c29d6487bef6c2be215c1b561c113:43
odyssey4mehttps://review.openstack.org/#/q/I213b66cddcad8328d7606385354a0a7194a5c56913:44
openstackgerritJames E. Blair proposed openstack/openstack-ansible-galera_client stable/pike: Zuul: Remove project name  https://review.openstack.org/54218313:44
openstackgerritMerged openstack/openstack-ansible-galera_server stable/pike: Prevent latest mariadb version  https://review.openstack.org/54208313:45
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible stable/pike: Use native packages to deploy keepalived  https://review.openstack.org/54218713:49
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Keep persistent systemd journals  https://review.openstack.org/54218813:52
mhaydenodyssey4me: i'll go pull those out13:52
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_client master: Remove release note for yum mirror change  https://review.openstack.org/54218913:53
mhaydenthe galera_server one didn't make it into anthing but ocata13:54
*** bhujay has quit IRC13:54
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_client stable/ocata: Remove release note for yum mirror change  https://review.openstack.org/54219013:54
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_server stable/ocata: Remove release note for yum mirror change  https://review.openstack.org/54219113:55
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_client stable/pike: Remove release note for yum mirror change  https://review.openstack.org/54219213:55
mhaydeni think that covers it13:56
odyssey4methanks mhayden13:57
mhaydende nada13:57
*** vnogin has joined #openstack-ansible13:57
openstackgerritMarc Gariépy (mgariepy) proposed openstack/openstack-ansible stable/ocata: Use native packages to deploy keepalived  https://review.openstack.org/54219313:57
mgariepyis it worth it to do the same for newton ? ^^13:58
odyssey4memgariepy given that UCA is configured on all hosts and containers, I don't really see why the keepalived role needs to do anything other than install from the available repositories14:00
odyssey4meso yeah, I think it may be best to implement that across all branches14:00
openstackgerritMerged openstack/openstack-ansible-galera_server master: Prevent latest mariadb version  https://review.openstack.org/54185514:02
*** vnogin has quit IRC14:02
*** rodolof has quit IRC14:03
*** rodolof has joined #openstack-ansible14:03
*** Mr_Smurf has quit IRC14:04
openstackgerritJames E. Blair proposed openstack/openstack-ansible-repo_server stable/ocata: Zuul: Remove project name  https://review.openstack.org/54220014:04
*** hachi has joined #openstack-ansible14:06
mgariepynewton needs uca for trusty.14:07
mgariepyisn't newton supposed to be eol ?14:07
*** hamza21 has quit IRC14:08
openstackgerritMerged openstack/openstack-ansible-galera_client stable/pike: Prevent latest mariadb version  https://review.openstack.org/54212514:08
openstackgerritMerged openstack/openstack-ansible-galera_client stable/ocata: Prevent latest mariadb version  https://review.openstack.org/54212714:08
openstackgerritMerged openstack/openstack-ansible-galera_client stable/pike: Zuul: Remove project name  https://review.openstack.org/54218314:15
evrardjpodyssey4me: not for newton14:16
evrardjpwoot14:16
evrardjpmgariepy: odyssey4me not for newton14:16
evrardjpI mean the keepalived thing14:16
evrardjpI think the version used is different, and on top of that trusty would definitely need uca14:17
odyssey4memgariepy evrardjp what I meant is that UCA is already there, so the keepalived role doesn't need to add another repo14:17
evrardjpodyssey4me: I am not sure it's already there14:17
evrardjpbecause in Newton we don't set repos at early stages like we do in master: we were waiting for pip install (at best)14:17
mgariepymight or might not depending on how you deploy your stack.14:17
odyssey4mefor queens - definitely, for earlier versions - maybe not14:17
odyssey4mealright, perhaps best to leave newton alone then14:18
evrardjppip install doesn't run on haproxy nodes, so we're kinda in need for it14:18
evrardjpyeah newton should be left alone, the rest can be moved to native14:18
mgariepyi'll leave newton like it is now.14:18
mgariepyi did both pike and ocata tu use native.14:18
odyssey4mefor ocata/pike I guess we need it to use UCA? or doesn't UCA have a newer package for it?14:18
mgariepynop14:18
odyssey4meah ok14:18
mgariepykeepalive is in uca for trusty14:18
mgariepyfor xenial it's in archive.ubuntu.com14:19
*** vnogin has joined #openstack-ansible14:21
openstackgerritMerged openstack/openstack-ansible-os_rally stable/newton: Zuul: Remove project name  https://review.openstack.org/54217814:21
openstackgerritMerged openstack/openstack-ansible-os_heat stable/newton: Zuul: Remove project name  https://review.openstack.org/54213914:22
odyssey4memgariepy so perhaps newton should only do uca if the distro is trusty - not essential, but cleaner14:26
openstackgerritMerged openstack/openstack-ansible-os_rally master: Reinitialize the virtualenv  https://review.openstack.org/53582214:26
mgariepyyeah but not sure what was the state of keepalived role for newton.14:27
*** adcpdk has joined #openstack-ansible14:28
evrardjpI can double check14:28
*** esberglu has joined #openstack-ansible14:28
mgariepyi'll leave newton like it is now, anyway it's not breaking anything, and it's not like anybody will do a new deploy on newton.14:28
odyssey4mefair enough14:29
mgariepyat least i hope so.14:29
mgariepyhaha14:29
evrardjpdifferent variable but it would work14:29
evrardjpyeah fair14:29
mgariepyand newton should probably be OEL..14:29
evrardjpok let me get back to the sst issue :)14:29
evrardjpmgariepy: yeah we can EOL now14:30
evrardjpI will issue last tag in the next days, then we can move to EOL14:30
odyssey4meevrardjp given the mariadb issues, we may still need some role SHA bumps before we issue the next tag14:31
evrardjpodyssey4me: yeah ofc14:33
*** rama_y has joined #openstack-ansible14:33
evrardjpthe next release tag should be asked Friday 16th, so we have time14:33
*** lbragstad has joined #openstack-ansible14:37
openstackgerritMerged openstack/openstack-ansible-tests master: Fix Gnocchi service URLs  https://review.openstack.org/54194614:40
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_watcher stable/pike: Zuul: Remove project name  https://review.openstack.org/54223914:44
*** hachi has quit IRC14:45
*** adcpdk has quit IRC14:51
*** jwitko_ has joined #openstack-ansible14:54
*** olivierbourdon38 has quit IRC14:55
*** SerenaFeng has joined #openstack-ansible15:02
openstackgerritJames E. Blair proposed openstack/openstack-ansible-lxc_hosts stable/pike: Zuul: Remove project name  https://review.openstack.org/54224815:04
*** acormier has joined #openstack-ansible15:05
*** tux_ has quit IRC15:08
*** weezS has joined #openstack-ansible15:10
cloudnullmornings15:12
*** hamzy has quit IRC15:12
*** tux_ has joined #openstack-ansible15:12
*** sar has quit IRC15:15
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add nspawn container driver  https://review.openstack.org/47701715:16
*** tux_ has quit IRC15:17
*** chyka has joined #openstack-ansible15:20
openstackgerritMerged openstack/openstack-ansible-apt_package_pinning stable/pike: Zuul: Remove project name  https://review.openstack.org/54199515:23
openstackgerritMerged openstack/openstack-ansible-pip_install stable/ocata: Zuul: Remove project name  https://review.openstack.org/54195315:23
*** vnogin has quit IRC15:23
*** vnogin has joined #openstack-ansible15:25
idlemindodyssey4me thx for the linkage on that novnc / spice console issue15:25
idlemindmhayden does the stig for communication session timeout also cause ssh to drop if no activity is happening? and i swear i remember in one of your preso's on youtube you mentioned a way to skip stig's by the name v-xxxx but i can't seem to find it15:27
openstackgerritMerged openstack/openstack-ansible-openstack_hosts stable/ocata: Zuul: Remove project name  https://review.openstack.org/54203115:28
openstackgerritMerged openstack/openstack-ansible-os_molteniron stable/pike: Zuul: Remove project name  https://review.openstack.org/54196515:29
*** chyka has quit IRC15:31
*** brad[] has joined #openstack-ansible15:34
openstackgerritMerged openstack/openstack-ansible-rsyslog_client stable/newton: Zuul: Remove project name  https://review.openstack.org/54214515:34
*** SerenaFeng has quit IRC15:38
odyssey4meidlemind find the tag for the task, then use --skip-tags <stig ref/tag number>15:39
idlemindso say in openstack-ansible setup-everything ... add --skip-tags <stig>15:39
openstackgerritMerged openstack/openstack-ansible-ops stable/newton: Zuul: Remove project name  https://review.openstack.org/54209615:40
idlemindno way to skip the stig in my user_config or user_variables15:40
odyssey4meidlemind some of the items have config options - check the security role docs15:44
idlemindya i've been digging around in them found a few w/bools to skip but few and far between15:44
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_barbican stable/ocata: Zuul: Remove project name  https://review.openstack.org/54226915:44
cloudnullanything I can help with regard to our mariadb issues ?15:45
odyssey4meidlemind https://docs.openstack.org/ansible-hardening/latest/15:45
idlemindthanks might be better on that page than just browsing the github repo lol15:46
*** hamzy has joined #openstack-ansible15:46
odyssey4mecloudnull I think that evrardjp has isolated it down to the extrabackup SST15:46
cloudnulljust a change in the xtrabackup that's broken or something we need to update in our setup?15:47
*** rama_y has quit IRC15:47
*** hamzy_ has joined #openstack-ansible15:50
*** Ritesh has joined #openstack-ansible15:51
*** hamzy has quit IRC15:52
mhaydenidlemind: holler if you're stuck -- i'm the usual maintainer of that role :P15:53
idlemindmhayden yar i'm looking at killing some more of the ssh stuff, in particular the getting kicked out every 10/15 mins. it's my lab so i'm not heartbroken if it's not 100% stig compliant. overall love the added security items15:54
idlemindi'm starting with security_sshd_client_alive_count_max back to 3 from 015:54
mhaydenthat helps15:54
*** SerenaFeng has joined #openstack-ansible15:54
mhaydenalso look for that other one that sets TMOUT in /etc/profile15:54
mhaydenthat one will cut off ssh and local shells15:55
idlemindk is that security_rhel7_session_timeout15:55
mhaydenindeed15:55
mhaydenand yes, both of those can be super annoying15:55
idlemindcan i skip that one or does a value of 0 make it infinite?15:55
*** kstev has joined #openstack-ansible15:55
openstackgerritMerged openstack/openstack-ansible-os_glance stable/pike: Zuul: Remove project name  https://review.openstack.org/54200515:55
mhaydeni think i set it to 015:55
mhaydenyeah, i did15:55
idlemindk i'll start there thx15:55
mhaydenanother option is to start a tmux session when you connect15:55
mhaydentmux keeps it alive somehow15:55
idlemindtmux?15:55
mhaydenyeah, tmux is a terminal muxer, like screen15:56
idlemindah15:56
idlemindso it has hax15:56
idlemindi like it15:56
*** tux_ has joined #openstack-ansible15:56
mhaydenssh to a machine, type "tmux" and you're good to go15:56
mhaydenCTRL-b and then d to detach15:56
mhayden"tmux a" to reattach15:56
mhayden(of course tmux does a ton more than that)15:56
mhaydenbut that should get you started15:56
idlemindcool i'll give that a look too15:56
mhaydenin texas, we would say it's handier than hip pockets on a hog15:58
idlemindlol oh texas15:58
idlemindbrb have to go eat more cheese15:58
*** weezS has quit IRC15:59
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/pike: Zuul: Remove project name  https://review.openstack.org/54224816:01
evrardjpmhayden: hahah16:01
idlemindbtw added a second compute node to my little lab cloud, man dat was easy, 2 lines in my change controlled user_config and fire off a command to bring a kickstarted centos box into the fold so thx all16:01
evrardjphip pockets on a hog16:02
*** pcaruana has quit IRC16:02
mnaserhttps://review.openstack.org/#/c/541924 failed for a small typo16:03
mnasermhayden: mind having a look for a quick revision to wait for check to go through again?16:03
evrardjpgreat I just lost access to my machine doing a sst with xtrabackup.16:06
evrardjpmy whole machine froze.16:06
evrardjp?!16:06
*** adcpdk has joined #openstack-ansible16:06
*** vnogin has quit IRC16:08
idlemindugh oh16:09
idlemindsee just proof we should never backup16:09
idlemindoverrated16:09
idlemind(jk)16:09
adcpdkHi everyone! Hi idlemind! yesterday I was able to figure out with veth12 interface configuration, so now I can start the instances up. However I have a few problems still here and there. My biggest issue now is that even though I create flat public network and attach a router to it, I cannot ping the router from the external network, only form the internal.16:09
*** SerenaFeng has quit IRC16:09
idlemindadcpdk are you dim__ from yesterday?16:09
*** udesale has quit IRC16:10
adcpdkyes16:10
adcpdkdim is easier16:10
idlemindk i only support ipv6 external networks (jk)16:10
idlemindso your new flat network, i assume you have a layer 3 device (router) on the real-life physical side right?16:10
adcpdkwell, what I call external is not actually external here, it's the same network I use for br-mgmt, I just want to be able to login to those vms using ssh (Security rules, like firewall is configured)16:11
adcpdke.g. I use bridge br-mgmt binded with vlan30 enps0f0.3016:12
openstackgerritMerged openstack/openstack-ansible-os_ironic stable/pike: Zuul: Remove project name  https://review.openstack.org/54202916:12
idlemindadcpdk when you create your external network you say something for "net-name" if i recall yesterday we commented out the "flat" section or did you get that working with another physical or vlan interface16:13
adcpdkI have played with my variablemany times, no luck. Here is what I had: ```host_bind_override: "br-mgmt"```, ```host_bind_override: "enps0f0.30"```, ```host_bind_override: "eth12"```16:14
adcpdkYesterday it worked for internal network only16:14
adcpdkvms were able to communicate with the router, I found out then that personally I could not ping the router from the external network it must be attached to16:15
adcpdkext-net--br-mgmt--R1--internal_net--VM116:16
adcpdkso I could not ping the router from the ext-net (aka br-mgmt)16:16
openstackgerritMerged openstack/openstack-ansible-os_watcher stable/pike: Zuul: Remove project name  https://review.openstack.org/54223916:16
*** sar has joined #openstack-ansible16:17
adcpdkI am still learning even how to use IRC16:17
adcpdkchanged name to dim as it's easier to type16:17
*** armaan has quit IRC16:18
*** armaan has joined #openstack-ansible16:18
*** woodard has quit IRC16:20
idlemindadcpdk i think if you wanted to use br-mgmt you'd have to do some snat'ing from a loopback (dummy) interface that you actually use for your "flat" network that gets tied into OpenStack. It's probably easier at this point to look at a different approach. The Br-VLAN in the default config lends itself to becoming a qinq type of interface. That's what I use for my ext-net(s) in my lab right now but it may be difficult to16:20
idlemindset that up on the outside side unless you're already familair with how to handle qinq stuff.16:20
openstackgerritMerged openstack/openstack-ansible-os_nova master: If debug is enabled, provide verbose output for host discovery  https://review.openstack.org/54144316:21
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/pike: If debug is enabled, provide verbose output for host discovery  https://review.openstack.org/54228716:21
idlemindadcpdk what you want to do is pick a vlan in your physical environment (or create a new one) that isn't used for anything else right now (ignore trying to re-use br-mgmt)16:21
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/ocata: If debug is enabled, provide verbose output for host discovery  https://review.openstack.org/54228816:21
*** chhagarw has quit IRC16:21
idlemindadcpdk then trunk that to your compute and neutron hosts (network_hosts). on those hosts adjust the network configuration to create a vlan interface on enps0f0 and use that in the host_bind_override and uncomment the "flat" network in user_config.yml16:22
idlemindadcpdk then when you create your "ext-net" in horizon (or openstack cli) specify the network name as "flat" as it is in user_config.yml by default. then set the gateway to the layer 3 device on the real lan (layer 3 switch or router)16:23
idlemindadcpdk i know it's a lot of text i'll see if i can make a dirty visio16:23
*** TxGirlGeek has joined #openstack-ansible16:27
*** vnogin has joined #openstack-ansible16:31
openstackgerritTaseer Ahmed proposed openstack/openstack-ansible-os_congress master: Introduce os_congress role in gerrit  https://review.openstack.org/52249116:35
*** vnogin has quit IRC16:35
*** vnogin has joined #openstack-ansible16:36
*** taseer2 is now known as Taseer16:37
*** sar has quit IRC16:38
*** sar has joined #openstack-ansible16:38
idlemindadcpdk https://imgur.com/a/on1eI16:39
idlemindlet me know if that doesn't end up just confusing it more16:39
openstackgerritMerged openstack/openstack-ansible stable/ocata: Zuul: Remove project name  https://review.openstack.org/54202716:42
evrardjpmhayden: the bug is tracked upstream now: https://jira.mariadb.org/browse/MDEV-1525416:43
evrardjpthe description is incorrect though, the joining is fine, as long as you don't have to do a sst16:44
evrardjpeverything fine until you need to transfer a byte16:44
*** eumel8 has quit IRC16:44
evrardjpso I will dig deeper, I am sure it's the script that changed that is causing the issue: variable wrongly renamed or something16:44
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest master: Properly check for an existing log directory  https://review.openstack.org/54230716:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement a scenario with no containers  https://review.openstack.org/50422416:45
*** dariko has joined #openstack-ansible16:46
*** armaan has quit IRC16:47
*** armaan has joined #openstack-ansible16:47
nurdiehow do i load /etc/nova/policy.json changes16:47
*** rama_y has joined #openstack-ansible16:47
*** Ritesh has quit IRC16:47
*** openstackgerrit has quit IRC16:48
adcpdkthank you idlemind! This is amazing, I got your point and created br33 binded to vlan33 enps0f0.33 on all three nodes and deployment host just in case16:53
idlemindadcpdk it needs to be the vlan interface, enps0f0.33 not a bridge on the actual openstack nodes k16:54
adcpdkoh I see16:54
adcpdkI will try and let you know16:54
adcpdkbtw you shouldn't stay hungry longer 711 rules16:54
idlemindya something about bridges can't be added to bridges and behind the scenes openstack creates a bridge for the "flat" network and addes that "host_bind_interface" to the newly created bridge16:55
idlemindrando thought does review.openstack.org have an api that can be queried by scrubs like me16:56
adcpdkI will let you know once I re-ran that os-neutron ansible playbook16:56
idlemindadcpdk cool cool good luck!16:57
*** weezS has joined #openstack-ansible16:58
*** TxGirlGeek has quit IRC17:00
*** TxGirlGeek has joined #openstack-ansible17:01
adcpdkidlemind, so this should work now?17:01
adcpdk```17:01
adcpdk    - network:17:01
adcpdk        container_bridge: "br-vlan"17:01
adcpdk        container_type: "veth"17:01
adcpdk        container_interface: "eth12"17:01
adcpdk        host_bind_override: "enp1s0f0.33"17:01
adcpdk        type: "flat"17:01
adcpdk        net_name: "flat"17:01
adcpdk        group_binds:17:01
adcpdk          - neutron_linuxbridge_agent17:01
adcpdk```17:01
adcpdkhttps://pastebin.com/mC6NgRyX17:02
adcpdksorry for pasting this all above17:02
idlemindyup as far as i know, one of the experts could explain the logic behind container_bridge: "br-vlan" I haven't figured out why that's there in that fashion yet17:02
odyssey4meadcpdk I would suggest that you use a paste service or gist to communicate multi-line things, otherwise you might end up being kicked for flooding by a bot or something17:02
adcpdkodyssey4me sorry, I though my agent will transfer my multiline, but it didn't. I used pastebin instead, my apologies17:03
odyssey4meno worries :)17:03
odyssey4mealways good to see people helping each other out :)17:04
dcdamienHi! Does anyone have an idea why this -> http://paste.openstack.org/show/666731/ in /etc/openstack_deploy/env.d/santracity-proxy.yml and this -> http://paste.openstack.org/show/666735/ in /etc/openstack_deploy/conf.d/santracity-proxy.yml doesn't make such containers when running lxc-containers-create.yml playbook?17:04
idlemindodyssey4me do you know what container_bridge: "br-vlan" is used for in the flat network? is it just because we don't know the name of the bridge neutron will create?17:04
idlemindor is br-vlan (native) also supposed to map to the vlan being presented via host_bind_override?17:05
odyssey4meI'm afraid that I'm not well versed in the voodoo of networking configs in OSA. :)17:06
odyssey4mecloudnull may be able to help there, and some others know their way around too17:06
idlemindthx17:08
odyssey4medcdamien the physical skep items need totally different names, and those are the ones you need in your conf.d file17:08
odyssey4medcdamien see https://github.com/openstack/openstack-ansible/blob/master/inventory/env.d/aodh.yml as an example17:09
idlemindi have a sneaky suspicion the native vlan of br-vlan has to match the host_bind_override to make it all work17:09
odyssey4meidlemind yes, IIRC that is correct17:09
odyssey4methere's a ton of stuff in https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example which explains all that, along with a networking appendix17:09
odyssey4mehttps://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/overview-network-arch.html17:10
odyssey4mehttps://docs.openstack.org/project-deploy-guide/openstack-ansible/latest/app-networking.html17:10
idlemindk adcpdk we'll have to rethink your approach a little to get to a functional flat then17:10
idlemindah ok, i see how this is supposed to work in the aio ... the bootsrap is supposed to create a veth called eth12 on the host that plugs into br-vlan and that can be referenced in the openstack_user_config as eth12 but because it's done by bootstrap-aio.sh in adcpdk's case that eth12 (veth) never gets created17:14
*** gkadam has quit IRC17:15
odyssey4medcdamien I think what you're hitting is https://bugs.launchpad.net/openstack-ansible/+bug/162358417:16
openstackLaunchpad bug 1623584 in openstack-ansible "Dynamic inventory clash between host group name and container group name" [Low,Confirmed] - Assigned to Nolan Brubaker (nolan-brubaker)17:16
adcpdkidlemind thanks for looking in to that for me17:17
idlemindnp i needed to figure it out too17:17
idlemindjust been putting it off17:17
*** vnogin has quit IRC17:17
adcpdkAIO worked fine for me, I only started having problems deploying testing environment from the scratch: https://docs.openstack.org/project-deploy-guide/openstack-ansible/draft/app-config-test.html#introduction17:18
adcpdkI will be in 30 minutes, will need to grab my lunch17:18
idlemindya cuz the aio scripting creates the eth12 veth interface on br-vlan17:18
idlemindso when you created the nodes in a more traditional fashion you have to create the eth12 veth on your own17:19
*** peri has quit IRC17:20
idlemindis bootstrap-host/tasks/prepare_networking.yml meant to be run to configure host networking or is it assumed we do that via other means (manual, our own playbooks)?17:22
*** openstackgerrit has joined #openstack-ansible17:25
openstackgerritJames E. Blair proposed openstack/openstack-ansible-ceph_client stable/pike: Zuul: Remove project name  https://review.openstack.org/54232517:25
evrardjpnurdie: you can override nova policy with what you want, see also our config_template overrides in the documentation17:27
dcdamienodyssey4me: thanks, this is it17:29
*** TxGirlGeek has quit IRC17:32
*** TxGirlGeek has joined #openstack-ansible17:32
*** sar has quit IRC17:34
Guy:q!17:35
evrardjp:w!17:35
Guylol17:35
evrardjpYou can't leave us!17:35
evrardjpthat's not nice!17:35
evrardjp:D17:35
Guywouldnt dream of it!17:36
mhaydenESC ZZ17:36
Guydont suppose anyone has a sample haproxy.cfg file17:36
evrardjpmhayden: YES17:36
GuyI cant get the backend up even though the port is listening17:36
evrardjpThat's what I do!17:36
Guysweet!17:37
mhaydeni used to be a CTRL-X y kinda guy17:37
mhaydenin nanoland17:37
evrardjpf3 f217:37
evrardjpbut yeah ZZ is the deal17:37
cloudnullim all about that meta asdhklasdlkjhasdlkjhasdkljhasdlkjhaashjdkjalhdasklj kljha skldjh aslkjdhas lkdjh to exit my editor17:37
evrardjpcloudnull: I always knew you loved emacs.17:37
cloudnullhahahaha17:37
evrardjpit was well hidden, you're trying to put that away. But it's like stella, and budweiser, always in your heart at home.17:38
evrardjp:p17:38
evrardjphahahaha17:38
evrardjpGuy: what's your issue with haproxy?17:38
Guywell...17:38
Guyhttps://www.irccloud.com/pastebin/dIni5n8J/17:39
evrardjpwell it doesn't look like an haproxy issue17:40
evrardjpwhat about your galera cluster?17:40
GuyI can connect to the host with mysql -u  root -p -h17:40
evrardjpis the little boy happy ?17:40
Guygalera is cool17:40
evrardjpshow status; ?17:40
GuyI can get to the database17:40
evrardjpto see if it cluster fines?17:40
evrardjpif it clusters correctly?17:40
evrardjpdarn that's a difficult sentence17:41
Guy:)17:41
evrardjpalso I don't know what you have configured for networking17:41
Guyshow status returns sycned and operationsal17:42
Guyum17:42
evrardjpbut if using /24, 172.29.238.236 and 172.29.236.13 aren't on the same net. Not sure which one does what and if they have access to other things... I am just stabbing in the dark there.17:42
evrardjpGuy: interesting17:42
evrardjpso it's behaving fine, showing a proper cluster17:42
Guyyeah17:43
evrardjp(I guess you checked on all )17:43
*** woodard has joined #openstack-ansible17:43
Guy its a /2217:43
Guyyes sir, checked all that17:43
GuyI think its the ha backend17:43
cloudnullevrardjp: lolol. I did buy a stella challis in your honor http://www.stellaartois.com/en_us/water.html17:43
GuyI can connect directly to the cluster from keystone to galera17:43
evrardjpwhat is that cloudnull ?17:44
cloudnullstella, the best beer from belgium is changing the lives of folks around the world17:44
evrardjpwe are good people!17:45
cloudnullhahahaha17:45
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_ceilometer stable/newton: Zuul: Remove project name  https://review.openstack.org/54234817:45
evrardjpstella exports for people that don't know beer, and it works17:45
*** vnogin has joined #openstack-ansible17:45
evrardjpAsk the uk folks.17:45
evrardjp:p17:45
*** gillesMo has quit IRC17:45
evrardjpok I have to go... dinner time!17:46
evrardjpwill continue on the galera thing tomorrow17:46
Guyenjoy!17:46
cloudnulltake care evrardjp17:46
openstackgerritMajor Hayden proposed openstack/openstack-ansible-os_nova master: Zuul: Remove project name  https://review.openstack.org/54111717:46
evrardjpfor now, the only thing I have is that: https://jira.mariadb.org/browse/MDEV-15254 which is exactly the same problem. I'll be checking socat, and the script itself tomorrow!17:47
idlemindcloudnull evrardjp the tests directory has some tasks for setting up host networking i imagine this is optimized for our automated test suites and shouldn't be re-used; instead we should create and manage our own methods for getting the network setup prior to starting a deploy (per docs) correct?17:48
openstackgerritMajor Hayden proposed openstack/openstack-ansible-galera_server master: Set proper yum repo priority on CentOS 7  https://review.openstack.org/54192417:48
idlemindin particular it gives us the commands needed to get the veth pair up and rolling for br-vlan which would be needed on our compute_host(s) and network_host(s) right?17:49
*** vnogin has quit IRC17:50
odyssey4meidlemind yep17:50
odyssey4memany have tried to create a generic thing to build the networking bit, and many have failed - there are just too many possibilities17:51
idlemindya i'd imagine17:51
idlemindi'm still struggling with how i would want to define mine in code17:51
odyssey4methat said, with modern ansible it should be a *lot* easier17:51
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: Collect files from /etc/yum.repos.d/  https://review.openstack.org/54234917:51
odyssey4meand there's nothing that says we couldn't have a set of supported use-cases, and if that doesn't do what you need then you don't have to use them17:51
idlemindi'd like to stick w/network manager based commands and configs but i'm thinking the buck kinda stops at veths ...17:52
*** pbandark has joined #openstack-ansible17:55
*** sar has joined #openstack-ansible17:55
mhaydenjust found that centos isn't using openstack mirrors for RDO/openstack-pike :|17:57
mhaydenthe pip_install roles checks to see if they're present and bails if they are17:57
idlemindorly17:57
idlemindso what version am i running?17:57
*** TxGirlGeek has quit IRC18:01
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_zaqar stable/ocata: Zuul: Remove project name  https://review.openstack.org/54235118:05
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Ensure openstack_hosts sets nodepool variables  https://review.openstack.org/54235218:06
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add nspawn container driver  https://review.openstack.org/47701718:10
openstackgerritMerged openstack/openstack-ansible-openstack_hosts master: Keep persistent systemd journals  https://review.openstack.org/54218818:11
adcpdkidlemind my veth12 is running fine on node02 (compute)18:15
adcpdkI just needed to pre-up it18:15
idlemindadcpdk neat so then you could move to using eth12 in your host_bind_override again18:15
idlemindwas that your original aio node? or did you have to do the creation stuff for it18:16
*** hw_wutianwei has quit IRC18:25
*** hw_wutianwei has joined #openstack-ansible18:25
openstackgerritMerged openstack/openstack-ansible-os_barbican stable/ocata: Zuul: Remove project name  https://review.openstack.org/54226918:25
idlemindwas that your original aio node? or did you have to do the creation stuff for it18:25
idlemindgrr copy and paste18:26
idlemindadcpdk the last thing, i had some trouble w/ssl based connections in ipv4 w/my external networks (or more likely my internal networks) not cleanly handling fragmentation. you might need or want to set the mtu of your ext-net to 1450 to accomodate for vxlan dropping 50 bytes off of the stock mtu not sure if any of the pro's see that in their deploys as well18:26
idlemindmhayden something work putting in an appendix for centos duders that might be following the tutorials and get tripped up by br-vlan for flat and vlan and not having an eth12 present? ... http://paste.openstack.org/show/666775/18:27
idlemind* something worth18:27
mhaydenoh, for an aio?18:27
idlemindeven a multi-node they all need an eth12 to map to the native vlan of br-vlan18:28
mhaydeni remember submitting this quandary to cloudnull about 2.5 years ago :)18:28
mhaydenwhen i was learning the ropes18:28
idlemindya because most ppl setup a bond or nested bridges with vlans like i did and don't notice or understand the veth: eth12 dealo in the tuts18:29
idlemind(like me)18:29
idlemindi more or less fished this from the tests that creates it for aio and mutli-node and translated the ansible back into a chunk that could be pasted at the ole terminal18:29
*** TxGirlGeek has joined #openstack-ansible18:30
idlemindi personally am using separate ansible to prep my hosts after kickstart but this could be useful none the less18:30
odyssey4mecloudnull mhayden got a minute to peek at https://review.openstack.org/542307 ?18:31
idlemindbut might just be nice for those reading along at home to see a link or note box about what the heck is happening with veth and eth12 and here's a script to get the veth running on your centos box18:31
openstackgerritMerged openstack/openstack-ansible-os_swift stable/newton: Zuul: Remove project name  https://review.openstack.org/54216218:31
openstackgerritMerged openstack/openstack-ansible-ceph_client stable/pike: Zuul: Remove project name  https://review.openstack.org/54232518:31
mhaydenodyssey4me: got it18:32
odyssey4meta18:32
odyssey4mecloudnull more deletions if you'd like :) https://review.openstack.org/#/q/topic:bug/1670419+(status:open+OR+status:merged)18:32
odyssey4memhayden cloudnull that os_tempest patch is the last thing standing in the way of https://review.openstack.org/504224 :)18:34
odyssey4me(other than reviews, of course)18:34
cloudnullnice !18:35
odyssey4meI'm tempted to actually make that aio_metal scenario voting ;)18:36
cloudnullI actually think we should make it experimental for now.18:36
odyssey4meit's passing. and does so in under an hour ;)18:36
odyssey4meI'm tempted to add another test on top - an upgrade test using no containers. :)18:37
cloudnullI mean octavia is passing most of the time, but that's still experimental.18:37
odyssey4methat's only 'cos no-one has made it not experimental18:37
cloudnulli have no strong opinions about it but it's a new test case18:38
odyssey4meI gave up asking when that's going to happen some time ago.18:38
cloudnullso long as it's not voting i think it's ok for now18:38
odyssey4mesure18:38
*** mbuil has quit IRC18:43
*** TxGirlGeek has quit IRC18:43
*** stuartgr has quit IRC18:46
*** armaan has quit IRC18:47
adcpdkidlemind I think I need to run infrustructure playbook now18:48
adcpdkmy mysql is not working)))18:48
idlemindadcpdk :( that's never fun18:48
idlemindif you're running 3 mysql containers (like the aio - i think) on 1 host you have to do some magic after a host reboot to get galera back and going18:49
*** vnogin has joined #openstack-ansible18:49
adcpdkFrom what I understand now is that either I can specify enps0f0.30 in  host_bind_override OR I can still have eth12 on it but instead play with /etc/network/interfaces spcifically the eth12 (with pre-ups)  section on compute node  ```bridge_ports enp1s0f0.33 br-vlan-veth```18:50
adcpdkI know what you are talking about, however I am not running AIO, thus the problem does not exist, I screwed it up by changing something in nova playbook18:51
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127018:52
*** TxGirlGeek has joined #openstack-ansible18:56
*** kstev has quit IRC18:57
*** poopcat has joined #openstack-ansible18:57
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova stable/ocata: If debug is enabled, provide verbose output for host discovery  https://review.openstack.org/54228818:57
*** vnogin has quit IRC18:58
idlemindadcpdk now that i understand more completely what container-bridge br-vlan and the host-override veth are doing ... i'd recommend for your build that you go with the veth and end up w/a eth12 on each compute node (via pre-up / post-down scripts) if you look at the tests for bootstrap-aio.yml in openstack-ansible you'll see how to do it for all platforms (ubuntu, suse and centos) i wrote how i just did it in a bash19:00
idlemindscript in a previous paste for my 2 centos compute nodes19:00
openstackgerritMerged openstack/openstack-ansible stable/pike: Use native packages to deploy keepalived  https://review.openstack.org/54218719:02
openstackgerritMerged openstack/openstack-ansible stable/ocata: Use native packages to deploy keepalived  https://review.openstack.org/54219319:02
openstackgerritMerged openstack/openstack-ansible-repo_server stable/ocata: Zuul: Remove project name  https://review.openstack.org/54220019:03
spotzevrardjp: for some reason I thought you were pinging this morning so I didn't ping19:05
*** hamza21 has joined #openstack-ansible19:10
openstackgerritMerged openstack/openstack-ansible-os_zaqar stable/ocata: Zuul: Remove project name  https://review.openstack.org/54235119:12
*** kstev has joined #openstack-ansible19:13
adcpdkidlemind could share what you did in bash?19:20
idlemindThis would be for CentOS http://paste.openstack.org/show/666775/19:20
adcpdkso this one would work then?19:22
adcpdkhttp://paste.openstack.org/show/666802/19:22
idlemindi'm no ubuntu pro but that looks right19:23
idlemindyou can verify locally w/tools like brctl show br-vlan after a reboot19:24
idlemind(or start and stops of networking service)19:24
adcpdkso in this case whatever you specify in    ``` bridge_ports enp1s0f0.33 br-vlan-veth``` will be your flat interface I assume, I don't understand master convention you used in ```ip link set br-vlan-veth master br-vlan19:26
adcpdk```19:26
idlemindbr-vlan-veth pairs w/eth12 which is referenced in host_bind_interface_override in user_config.yml19:27
adcpdki see19:27
adcpdkI will let you know of my results19:27
adcpdkdid it work for you?19:27
idlemindhaven't rebuilt neutron yet19:28
idlemindmyself19:28
idlemindhttps://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/openstack_user_config.yml.example#L30019:28
idlemindsee that line in openstack_user_config.yml?19:28
adcpdkyes19:29
idlemindthat's the name you use for the "interface" when you create your external network in horizon (or cli)19:29
adcpdkthat I understan19:29
idlemindk19:29
adcpdkunderstand*19:29
idlemindgood deal19:29
idlemindi'm going to step away for a minute too19:29
openstackgerritMerged openstack/openstack-ansible-os_nova master: Remove placement_database related options/code  https://review.openstack.org/54168519:29
adcpdkthank you!19:29
*** lbragstad has quit IRC19:31
*** lbragstad has joined #openstack-ansible19:32
foutatoroHi, I deployed openstack in 2 nodes with LVM as cinder's backend but when I run the command "lvs" the cinder-volume doesn't appear in storage_node19:36
foutatorohere is the error http://paste.openstack.org/show/666809/19:36
foutatorodid somebody get that before ?19:36
idlemindfoutatoro i create the cinder-volume before19:37
idlemindfor me i name it "cinder-volumes" though (just make sure it all matches up to your user_config.yml19:37
idlemindand it would be a vg19:38
adcpdkI had a similar problem 2 days ago, my VG called node03-vg it's totally unacceptable, it needs to be called "cinder-volumes" or it needs to be changed in user_config19:38
idlemindso vgs19:38
adcpdkfoutatoro please don't follow my mistakes and don't try to rename root VG with vgrename19:39
foutatoroidlemind: yes the name in openstack_user_conf is "cinder-volumes"19:39
adcpdktry add another drive to the system as a physical volume and create VG using it19:39
idlemindfoutatoro so create your vg and name it cinder-volumes (i do all of that via kickstart in centos but you can do it at the command-line after the fact)19:40
adcpdkwith the name referenced above19:40
idlemindyou can use a plain file on existing storage w/the loop device if you're just trying to get it working in a pinch (it'll be mucho slow)19:42
idlemindhttp://www.anthonyldechiaro.com/blog/2010/12/19/lvm-loopback-how-to/19:42
foutatoroadcpdk adcpdk : I think we can not create the volume the is not associated with an existing physical volume ?19:42
idlemindif you have space on an existing pv you can add a vg to it19:43
idlemind(i think)19:43
adcpdksay you have /dev/sda (hard drive1) and you create a physical volume of of that. Then you can create a VG e.g. root-vg, or cinder-volumes.19:43
mnaseris anyone working on figuring out why database access seems to be broken on centos 7 in functional tests19:44
adcpdkThe problem I had was that my system was already installed with VG name other than cinder-volumes and I had to add another physical drive to the server, create PV out of it and create additional VG using that drive, which  I called cinder-volumes19:44
mnaserdepending on https://review.openstack.org/#/c/541924/ still doesn't work unfortunately19:45
mnaserfatal: [infra1]: FAILED! => {"changed": true, "cmd": ["/openstack/venvs/keystone-testing/bin/keystone-manage", "db_sync", "--check"], "delta": "0:01:41.815048", "end": "2018-02-08 19:41:51.952171", "failed_when_result": true, "msg": "non-zero return code", "rc": 1, "start": "2018-02-08 19:40:10.137123", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}19:45
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_keystone stable/ocata: Zuul: Remove project name  https://review.openstack.org/54238319:45
mnaserhmm ok this is interesting19:45
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/keystone/keystone.log.txt.gz#_2018-02-08_19_41_51_84819:46
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/mysql_logs/galera_server_error.log.txt.gz19:46
mnaserthe server is literally shut down?19:46
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/redhat-rpm-list-installed-infra1.txt.txt.gz19:47
mnasermariadb-common 10.1.30-1.el7.centos combined with 10.1.31-1.el7.centos .. that cannot be good19:47
idlemindside note about speed of centos gates, should we disable fastestmirror to ensure the same mirror gets hit all the time and reduce cache hits after the first?19:50
idlemindor does apt-cacher filter some of the mirror variances out19:50
openstackgerritMerged openstack/openstack-ansible-os_tempest master: Properly check for an existing log directory  https://review.openstack.org/54230719:51
openstackgerritMohammed Naser proposed openstack/openstack-ansible-galera_client master: Prevent latest mariadb version  https://review.openstack.org/54211919:51
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127019:52
mnaserevrardjp: fyi i made a fix in your change, incorrect variable19:52
mnaserjust so we can speed things up because i want to get the aodh fix in19:53
evrardjpwhich one? and thank you :)19:54
evrardjpmnaser: we 've just pushed a release note to say remove 10.1.3119:54
mnaserevrardjp: https://review.openstack.org/542119 this one19:54
evrardjpquite a new thing19:54
mnasergalera_major_version in suse vars file instead of galera_client_major_version19:55
evrardjpoh yeah I thought I fixed that everywhere19:55
mnaserwow its already in check queue19:56
mnasergate is moving quick today19:56
*** vnogin has joined #openstack-ansible19:59
mgariepywow. installing on hdd is fun..20:07
mgariepyit's super fast.20:08
evrardjphaha20:11
evrardjpI can't remember when that arrived to me for the last time20:11
evrardjpssds are the deal right20:11
mgariepyi know.20:12
mgariepythe only good thing about that is the server posting seems really fast comparing to the install ..20:12
evrardjpdo the mongo db style20:13
evrardjpput everything into memory20:13
evrardjpthat's blazing fast20:13
mnaserevrardjp: https://review.openstack.org/#/c/542119/ done20:13
* mnaser crosses fingers his aodh change passes with that dependency20:14
evrardjpshouldn't be a problem20:14
*** vnogin has quit IRC20:14
evrardjpgalera works with just one machine20:14
evrardjpit's jsut the clustering that's borked on .3120:15
mnaserevrardjp: well aodh has been broken on installing keystone this entire time :\20:16
mnaserin centos-720:16
evrardjpmmm20:16
evrardjpin ubuntu how is it going?20:16
evrardjplink?20:17
evrardjpmhayden: mgariepy cloudnull could one of you merge this: https://review.openstack.org/#/c/542119/ ? please?20:17
evrardjpthen I can bump the roles, and deal with the fallout tomorrow20:18
mnaserevrardjp: https://review.openstack.org/#/c/541270/20:18
mnasereverything passes20:18
evrardjpmnaser: it's late for me, I will do something else of my life20:18
evrardjp:D20:19
mnaserexcept centos20:19
mnaserno problem20:19
evrardjpok that's good then!20:19
mnaseri'm at patchset #12 but yeah its just centos, even suse is ok20:19
evrardjpyeah so the fix of major isn't good?20:19
mnaseri just did a depends-on the fix i just modified, i think it might be related because the client and shared rpm was .31 and the common was .30 etc20:19
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/redhat-rpm-list-installed-infra1.txt.txt.gz20:20
mnasersee mismatching versions top of file20:20
evrardjpyeah20:20
*** chyka has joined #openstack-ansible20:20
evrardjpyour patch seem ok20:20
evrardjpyeah the depends on is required to make it work20:20
evrardjpas of now20:20
evrardjpwon't be the case in a few hours20:21
evrardjpI mean you wouldn't need those depends-on20:21
evrardjpbut let's wait for the logs of this with your last changes20:21
mnaseror maybe there's some other issue :( its stuck on "TASK [os_keystone : Check current state of Keystone DB]" again20:21
mnaserthe same place it failed before20:21
adcpdkdid anyone had this problem before? E: Failed to fetch http://mirror.rackspace.com/mariadb/repo/10.1/ubuntu/pool/main/m/mariadb-10.1/mariadb-server-10.1_10.1.31+maria-1~xenial_amd64.deb  Hash Sum mismatch20:22
evrardjpI can try it tomorrow locally20:23
odyssey4meadcpdk yep, that happens when the mirror updated and removed packages between the apt update and the apt install20:23
evrardjpI'd rather you figure it out though, I'd prefer focusing on fixing the package20:23
odyssey4meI wonder if mariadb isbusy pulling that version now20:23
odyssey4meevrardjp if you're bored, two more of these need reviews: https://review.openstack.org/#/q/topic:bug/1670419+(status:open+OR+status:merged)20:24
evrardjpodyssey4me: that would be nice20:24
evrardjpI am not bored, but my wife has something on the tele20:24
evrardjp:D20:24
mnaser2018-02-08 20:22:56.284491 | centos-7 | fatal: [infra1]: FAILED! => {"changed": true, "cmd": ["/openstack/venvs/keystone-testing/bin/keystone-manage", "db_sync", "--check"], "delta": "0:01:41.449436", "end": "2018-02-08 20:22:56.147893", "failed_when_result": true, "msg": "non-zero return code", "rc": 1, "start": "2018-02-08 20:21:14.698457", "stderr": "", "stderr_lines": [], "stdout": "", "stdout_lines": []}20:24
mnasersame thing again20:24
evrardjpI am just tired of xtradb20:24
*** chyka has quit IRC20:24
adcpdkodyssey4me so I should just wait and try again later?20:25
odyssey4memnaser it sounds like the keystone sync is failing - which will need follow up... unless there's some misconfiguration in that test20:25
mnaserodyssey4me: the sync isnt failing, the check for sync is, but also looking at keystone log, it complains about connection refused to mysql20:26
evrardjponly fails on centos though20:26
mnaserodyssey4me: which then checking the mysql logs.. i can see the service was shutdown20:26
odyssey4meadcpdk usually, yes - but we've been discussing how broken mariadb 10.1.31 is all day, if you didn't notice ;) so if that's a multi-node install it'll fail unless you implement a repo override20:26
odyssey4meadcpdk take a peek at https://review.openstack.org/54214420:27
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/keystone/keystone.log.txt.gz20:27
mnaserso that tells me mysql isnt running?20:27
evrardjpeither using .30, or using a different sst mechanism20:27
evrardjpmnaser: maybe STONITH20:27
mnaserwhich is weirdly confirmed by this - http://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/mysql_logs/galera_server_error.log.txt.gz20:27
mnaser"[Note] /usr/sbin/mysqld: Normal shutdown"20:27
mnaserits... gracefully shutting down? no errors..20:27
evrardjpwe do a restart at some point, so maybe it doesn't matter20:28
evrardjpwhat's the keystone log?20:28
evrardjpodyssey4me: I want to get this mariadb out of the way as fast as possible20:28
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/messages.txt.gz#_Feb__8_19_32_3720:28
mnasermysql gets shutdown20:29
evrardjpwonder if I should simply go back to a poor mechanism20:29
adcpdkI see thank you odyssey4me20:29
mnaserthen tries to start again here http://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/messages.txt.gz#_Feb__8_19_33_0820:29
odyssey4meevrardjp yeah, I hear you20:29
mnaserhttp://logs.openstack.org/70/541270/11/check/openstack-ansible-functional-centos-7/f0b3e0c/logs/openstack/infra1/messages.txt.gz#_Feb__8_19_33_0820:30
mnaserthen it's uninstalled?!?!20:30
evrardjpmnaser: compare with ubuntu. if ubuntu works, there is something to fix with centos, just like that.20:30
mnaserErased: MariaDB-server-10.1.30-1.el7.centos.x86_6420:30
odyssey4meI'm thinking that we just continue pinning to a specific version - and update that from time to time like the rest of the infra stuff.20:30
evrardjpodyssey4me: that's what I proposed earlier20:30
evrardjp:)20:30
mnaserif you look at the log something uninstalls mariadb20:30
odyssey4meYeah, I don't like it - but it seems like we're already doing it all over the place so we may as well continue.20:31
mnaseransible-yum: Invoked with allow_downgrade=False name=['mariadb-common', 'mariadb-config', 'mariadb-server', 'mariadb-libs', 'mariadb'] list=None install_repoquery=True conf_file=None disable_gpg_check=False state=absent disablerepo=None update_cache=False enablerepo=None exclude=None security=False validate_certs=True installroot=/ skip_broken=False20:31
mnaserwhaaat20:31
* mnaser goes back to ara20:31
*** hw_wutianwei has quit IRC20:31
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Ensure openstack_hosts sets nodepool variables  https://review.openstack.org/54235220:31
evrardjpmnaser: that's because of incompatible packages20:31
odyssey4memnaser the removal should only be happening for a package version that doesn't match the mariadb version that's supposed to be installed20:31
odyssey4memaybe this will solve the issue you're seeing: https://review.openstack.org/54192420:32
*** armaan has joined #openstack-ansible20:32
evrardjphttps://github.com/openstack/openstack-ansible-galera_server/blob/master/tasks/galera_install.yml#L70-L7920:32
evrardjpmnaser: ^20:32
mnaseralready depending on that odyssey4me20:32
odyssey4memnaser our mariadb stuff is great when it works, but is a bit bonkers :/ sorry20:33
mnaserot20:33
mnaserit's okay, just gotta figure it out20:33
*** hw_wutianwei has joined #openstack-ansible20:33
mnaserFeb  8 19:31:54 localhost yum[10211]: Installed: MariaDB-server-10.1.30-1.el7.centos.x86_64 .. and later .. Feb  8 19:33:31 localhost yum[15791]: Erased: MariaDB-server-10.1.30-1.el7.centos.x86_6420:33
odyssey4meyou should see the ocata version of the role - it's horrible20:33
*** armaan has quit IRC20:33
evrardjpmnaser: yeah that's why I wanted to move to a more smart package installation20:34
odyssey4mehttps://media.giphy.com/media/374pcIBVEGb6g/giphy.gif20:34
evrardjp:)20:35
mnaserwhy is there a logic that attempts to delete/remove those packages?20:35
evrardjpnot sure what you mean20:35
odyssey4me'cos the docs said when upgrading, you should remove the old, then install the new20:35
odyssey4meand then of course we also have the stupid situation that you may have a package from the wrong repo20:35
mnaserhttps://github.com/openstack/openstack-ansible-galera_client/blob/master/vars/redhat-7.yml#L42-L4820:38
mnasershould we drop that?20:38
mnaserthe client shouldnt try to uninstall server rpms?20:39
odyssey4mehmm, that's weird - why is that there mhayden ?20:39
mnaserwhat seems to happen is20:39
openstackgerritMerged openstack/openstack-ansible-galera_client master: Prevent latest mariadb version  https://review.openstack.org/54211920:39
odyssey4mehttps://github.com/openstack/openstack-ansible-galera_client/commit/72cc31a4d6107a69f3d9d5f2bd287112385df1c220:39
mnasergalera_client runs, removes nothing, galera_server runs, goes by smoothly20:39
mnaseros_keystone starts, it depends on galera_client, it uninstalls the mysql server20:40
mnaseri guess other tests dont have keystone and galera on the same container?20:40
odyssey4methis time it's hwoarang's fault :)20:40
evrardjpwoop20:40
evrardjpI think I merged it.20:40
mnaseryeah so20:41
mnaserhttps://github.com/openstack/openstack-ansible-os_magnum/blob/master/tests/inventory20:41
evrardjpoh no, it's major which merged it!20:41
evrardjpthat's still major breakage20:41
mnaserthis one doesnt get messed up because keystone doesn't get installed on the same container as galera20:41
odyssey4mehttps://media.giphy.com/media/naxep4vNBAOL6/giphy.gif20:41
idlemindlol major breakage20:41
mnaseroh 2 days ago20:41
odyssey4meah yes of course - the galera_client role does no package actions on the galera_server container...20:42
mnaseri dont know if we have to actaully do that but at least remove mariadb-server20:43
odyssey4meso the issue here is that the inventory isn't set out the way we expect it to... ie with galera_server on a host different to all the stuff using galera_client20:43
mnaserok so should i add another container for keystone?20:43
mnaserbut also this means galera_client is dangerous to run now20:43
odyssey4methe roles should typically have the infra in a container, then a general openstack container for keystone and whatever else, then any additional containers to test whatever the role wants to test20:44
mnaserand i think galera_client runs inside the galera container20:44
mhaydenwell, on CentOS, remember that upstream mariadb packages are "MariaDB-*" while the ones from centos are "mariadb-"20:44
mhaydenso they're different20:44
mhaydenthose lines remove the stock centos ones if they're present20:44
mhaydenand replaces them with the ones from upstream20:44
mnaserso that might make a "surprise, your mariadb server is uninstalled by galera_client and installed by galera_server"20:44
odyssey4memnaser it does, but with this flag: https://github.com/openstack/openstack-ansible-galera_server/blob/master/meta/main.yml#L4320:45
mhaydenwe could pile those into a transaction and make the package install/removal faster20:45
mnaserodyssey4me: ah ok good point20:45
odyssey4megalera_client should be respecting that flag at all times20:45
mnaseryeah but https://github.com/openstack/openstack-ansible-os_keystone/blob/master/meta/main.yml#L44-L46 would still uninstall it20:46
mnaserso i guess i should add a third container20:46
mnaserinfra1, openstack1, gnocchi, aodh20:46
odyssey4memnaser yep, that'd be best20:47
odyssey4meevrardjp this is infuriating, and perhaps confirms that we have a race condition - https://review.openstack.org/#/c/542288/ (os_nova ocata) passed this time20:50
openstackgerritMerged openstack/openstack-ansible-galera_server master: Set proper yum repo priority on CentOS 7  https://review.openstack.org/54192420:50
openstackgerritMohammed Naser proposed openstack/openstack-ansible-os_aodh master: Update the Tempest plugin to point towards the new plugin  https://review.openstack.org/54127020:51
mnaserok20:51
mnaseri think this might be the one20:51
evrardjpodyssey4me: I am sorry if that's infuriating. So much to do, so little time.20:53
evrardjpI started to take a more systematic approach by building etherpads, but it doesn't work either.20:53
evrardjp(see telemetry stack fixing, zuul v3, ...)20:54
*** ChanServ has quit IRC20:57
odyssey4metime for me to head out - night folks!20:57
openstackgerritMerged openstack/openstack-ansible-ops master: Stop any running VMs when re-deploying  https://review.openstack.org/54141620:59
*** hamzy_ has quit IRC21:00
evrardjpodyssey4me: good night21:06
*** acormier has quit IRC21:06
evrardjpmnaser: have you proposed a revert?21:06
openstackgerritMerged openstack/openstack-ansible-tests master: Remove placement_database related options/code  https://review.openstack.org/54169221:07
openstackgerritMerged openstack/openstack-ansible-ops master: Replace pxelinux with iPXE support in MNAIO  https://review.openstack.org/53932721:07
*** acormier has joined #openstack-ansible21:07
evrardjpof https://review.openstack.org/#/c/541581/21:07
*** Guy has quit IRC21:07
*** acormier has quit IRC21:08
*** acormier_ has joined #openstack-ansible21:08
*** acormier_ has quit IRC21:08
*** acormier has joined #openstack-ansible21:08
*** dariko has quit IRC21:09
*** hamza21 has quit IRC21:10
openstackgerritMerged openstack/openstack-ansible-os_nova master: Zuul: Remove project name  https://review.openstack.org/54111721:14
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: Ensure openstack_hosts sets nodepool variables  https://review.openstack.org/54235221:18
openstackgerritMerged openstack/openstack-ansible-os_ceilometer stable/newton: Zuul: Remove project name  https://review.openstack.org/54234821:24
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests master: Use package_state=present for CentOS 7 testing  https://review.openstack.org/54101621:25
*** dariko has joined #openstack-ansible21:25
geekinutahFolks, where would be the right place to do some pre-deployment checks21:29
geekinutahfor example, using contrainer_interface "eth0" is not really a viable strategy :-)21:29
geekinutahwould like to contribute some sort of check as penance21:29
*** dave-mccowan has quit IRC21:30
*** ChanServ has joined #openstack-ansible21:31
*** barjavel.freenode.net sets mode: +o ChanServ21:31
openstackgerritMerged openstack/openstack-ansible-os_keystone stable/ocata: Zuul: Remove project name  https://review.openstack.org/54238321:33
*** dariko has quit IRC21:35
*** adcpdk has quit IRC21:35
openstackgerritMajor Hayden proposed openstack/openstack-ansible-tests stable/pike: test-set-nodepool-vars: Add nodepool mirror discovery for openSUSE  https://review.openstack.org/54245621:42
mhaydenso pike was not checking for nodepool properly and wasn't utilizing mirrors for centos/opensuse ^^21:42
idlemindmhayden that is specific to the gates right?21:44
mhaydenright21:44
idlemindso is this another hope that they speed up21:44
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_barbican stable/pike: Zuul: Remove project name  https://review.openstack.org/54245721:46
*** jamesdenton has quit IRC21:46
*** dave-mccowan has joined #openstack-ansible21:47
openstackgerritMohammed Naser proposed openstack/openstack-ansible-galera_client master: Revert "RedHat: Ensure that conflicting MariaDB packages are removed"  https://review.openstack.org/54245821:57
*** armaan has joined #openstack-ansible21:57
mnaserwoo21:59
mnaserprogress21:59
mnasercradox failing to install with "rados_inconsistent_pg_listq6SIPm.c:(.text+0x15): undefined reference to `rados_inconsistent_pg_list'" .. anyone seen something like this?21:59
openstackgerritMerged openstack/openstack-ansible master: Implement a scenario with no containers  https://review.openstack.org/50422422:05
openstackgerritMerged openstack/openstack-ansible master: Remove placement_database related options/code  https://review.openstack.org/54169122:05
*** woodard_ has joined #openstack-ansible22:06
*** woodard has quit IRC22:06
openstackgerritJames E. Blair proposed openstack/openstack-ansible-openstack_hosts stable/pike: Zuul: Remove project name  https://review.openstack.org/54246022:06
*** woodard_ has quit IRC22:08
openstackgerritMajor Hayden proposed openstack/openstack-ansible-openstack_hosts master: [WIP] Test package_state = present  https://review.openstack.org/54246122:11
*** sar has quit IRC22:14
*** chhagarw has joined #openstack-ansible22:17
*** chhagarw has quit IRC22:21
openstackgerritJames E. Blair proposed openstack/openstack-ansible-os_zaqar stable/pike: Zuul: Remove project name  https://review.openstack.org/54246622:26
*** chyka has joined #openstack-ansible22:27
*** chyka has quit IRC22:32
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add nspawn container driver  https://review.openstack.org/47701722:37
*** armaan has quit IRC22:44
*** armaan has joined #openstack-ansible22:44
openstackgerritJames E. Blair proposed openstack/openstack-ansible-galera_client stable/newton: Zuul: Remove project name  https://review.openstack.org/54247122:46
openstackgerritKevin Carter (cloudnull) proposed openstack/openstack-ansible master: Add nspawn container driver  https://review.openstack.org/47701722:48
*** TxGirlGeek has quit IRC22:58
*** foutatoro has quit IRC22:58
*** bauruine has quit IRC23:00
*** armaan has quit IRC23:00
*** TxGirlGeek has joined #openstack-ansible23:02
*** acormier has quit IRC23:08
*** acormier has joined #openstack-ansible23:08
*** chyka has joined #openstack-ansible23:08
mnaserwhat role takes care of installing repos for ceph?23:11
mnaseri ask because gnocchi builds with cradox which requires >= jewel but centos ships with hammer by default23:11
*** dave-mccowan has quit IRC23:12
mnaserso need to include whatever role that takes care of adding the latest repo so it installs a modern librados-devel23:12
*** acormier has quit IRC23:13
*** rodolof has quit IRC23:19
*** pbandark has quit IRC23:21
*** woodard has joined #openstack-ansible23:23
errrhowdy woodard23:32
*** kstev has quit IRC23:32
*** chyka has quit IRC23:34
*** Jeffrey4l has quit IRC23:34
*** weezS has quit IRC23:39
*** chyka has joined #openstack-ansible23:49
*** TxGirlGeek has quit IRC23:50
*** chyka has quit IRC23:51
*** tux_ has quit IRC23:51
*** tux_ has joined #openstack-ansible23:52
*** TxGirlGeek has joined #openstack-ansible23:56
*** tux_ has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!