| *** G________ has joined #openstack-ansible | 00:06 | |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Dynamically compute nova_scheduler_host_subset_size value https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/791965 | 00:24 |
|---|---|---|
| opendevreview | Merged openstack/openstack-ansible-os_sahara master: Fix linters https://review.opendev.org/c/openstack/openstack-ansible-os_sahara/+/792241 | 01:01 |
| *** miloa has joined #openstack-ansible | 04:31 | |
| *** G________ has quit IRC | 06:31 | |
| noonedeadpunk | mornings | 06:35 |
| ebbex | mornin' | 06:59 |
| *** andrewbonney has joined #openstack-ansible | 07:19 | |
| noonedeadpunk | ok, so I guess I've figured out what makes bullseye lxc to fail - it doesn't like specificly `lxc.mount.auto = proc:rw sys:ro cgroup:ro` | 07:21 |
| *** ebbex has quit IRC | 07:30 | |
| *** ebbex has joined #openstack-ansible | 07:31 | |
| *** rpittau|afk is now known as rpittau | 07:44 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Add debian bullseye support https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/793895 | 07:44 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_container_create master: Add Debian Bullseye support https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/793896 | 07:44 |
| *** tosky has joined #openstack-ansible | 07:48 | |
| *** tosky has quit IRC | 07:48 | |
| *** jrosser has joined #openstack-ansible | 07:52 | |
| *** tosky has joined #openstack-ansible | 08:08 | |
| *** luksky has joined #openstack-ansible | 08:28 | |
| noonedeadpunk | but then faced https://github.com/lxc/lxc/issues/2778 | 08:36 |
| opendevreview | Merged openstack/openstack-ansible master: Bump ansible-lint version https://review.opendev.org/c/openstack/openstack-ansible/+/792154 | 08:42 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Update contributors guide to reflect IRC network change https://review.opendev.org/c/openstack/openstack-ansible/+/793207 | 09:24 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Replace deprecated UPPER_CONSTRAINTS_FILE variable https://review.opendev.org/c/openstack/openstack-ansible/+/791693 | 09:24 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump ansible-base to 2.10.10 https://review.opendev.org/c/openstack/openstack-ansible/+/791293 | 09:25 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add hardening specific variables to tests https://review.opendev.org/c/openstack/openstack-ansible/+/792639 | 09:25 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Always use checkout for git_requirements library https://review.opendev.org/c/openstack/openstack-ansible/+/791011 | 09:25 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Fix sahara backend URL https://review.opendev.org/c/openstack/openstack-ansible/+/791999 | 09:26 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Gather additional required facts to min https://review.opendev.org/c/openstack/openstack-ansible/+/789776 | 09:29 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Gather minimal facts in CI https://review.opendev.org/c/openstack/openstack-ansible/+/790042 | 09:29 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Add libcapstone4 pinning from backports https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/792898 | 09:52 |
| *** sshnaidm|off is now known as sshnaidm | 09:57 | |
| *** sshnaidm has joined #openstack-ansible | 09:58 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Replace linters test with integarted one https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/793937 | 10:03 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_container_create master: Replace linters test with integarted one https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/793938 | 10:05 |
| opendevreview | Merged openstack/openstack-ansible master: Update contributors guide to reflect IRC network change https://review.opendev.org/c/openstack/openstack-ansible/+/793207 | 10:08 |
| opendevreview | Merged openstack/openstack-ansible-os_magnum master: Define region for Magnum trust https://review.opendev.org/c/openstack/openstack-ansible-os_magnum/+/793585 | 10:15 |
| tosky | hello again! The linting fix was merged but the sahara functional job is still failing: https://review.opendev.org/c/openstack/sahara/+/791882/ | 10:16 |
| tosky | did you say it need to be changed? | 10:17 |
| jrosser | looks like this is missing a default for when the compute_hosts group is empty https://opendev.org/openstack/openstack-ansible-os_nova/commit/56fdbfe0d8af179a290663fe693a47da649e3f14 | 10:39 |
| *** odyssey4me has joined #openstack-ansible | 11:41 | |
| noonedeadpunk | ouch | 11:43 |
| *** sshnaidm has quit IRC | 11:51 | |
| *** admin1 has quit IRC | 11:52 | |
| *** sshnaidm has joined #openstack-ansible | 11:59 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_nova master: Don't rely on compute_hosts existance https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/793954 | 11:59 |
| *** admin1 has joined #openstack-ansible | 12:01 | |
| noonedeadpunk | tosky: ^ this should fix it, sorry for the trouble | 12:01 |
| tosky | noonedeadpunk: oh, thanks! | 12:02 |
| noonedeadpunk | but I suspect that test is somehow weird... | 12:04 |
| noonedeadpunk | will try to get some time for checking it out (actually replacing) in upcoming weeks | 12:05 |
| *** admin1 has quit IRC | 12:07 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Always use checkout for git_requirements library https://review.opendev.org/c/openstack/openstack-ansible/+/791011 | 12:21 |
| *** tbarron has quit IRC | 12:52 | |
| *** rpittau is now known as rpittau|afk | 12:57 | |
| *** G________ has joined #openstack-ansible | 13:00 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: [DNM] Add Debian Bullseye support https://review.opendev.org/c/openstack/openstack-ansible/+/783606 | 13:06 |
| *** tbarron has joined #openstack-ansible | 13:07 | |
| *** frenzy_friday has joined #openstack-ansible | 13:43 | |
| opendevreview | Merged openstack/openstack-ansible-os_octavia master: Add variables for rabbitmq ssl configuration https://review.opendev.org/c/openstack/openstack-ansible-os_octavia/+/791731 | 13:52 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder master: Remove obsoleted packages https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/793974 | 13:59 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: [DNM] Add Debian Bullseye support https://review.opendev.org/c/openstack/openstack-ansible/+/783606 | 14:02 |
| noonedeadpunk | ok, so bullseye lxc works now at least :) | 14:18 |
| jrosser | was it systemd related stuff? | 14:19 |
| *** G________ has quit IRC | 14:24 | |
| *** G________ has joined #openstack-ansible | 14:24 | |
| *** G________ has quit IRC | 14:25 | |
| *** spatel has joined #openstack-ansible | 14:25 | |
| opendevreview | Merged openstack/openstack-ansible master: Bump ansible-base to 2.10.10 https://review.opendev.org/c/openstack/openstack-ansible/+/791293 | 14:31 |
| opendevreview | Merged openstack/openstack-ansible master: Replace deprecated UPPER_CONSTRAINTS_FILE variable https://review.opendev.org/c/openstack/openstack-ansible/+/791693 | 14:32 |
| opendevreview | Merged openstack/openstack-ansible master: Fix sahara backend URL https://review.opendev.org/c/openstack/openstack-ansible/+/791999 | 14:32 |
| *** gouthamr_ has joined #openstack-ansible | 14:35 | |
| opendevreview | Merged openstack/openstack-ansible-lxc_container_create master: Replace linters test with integarted one https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/793938 | 14:43 |
| *** opendevreview has quit IRC | 14:44 | |
| *** gouthamr has joined #openstack-ansible | 14:47 | |
| *** opendevreview has joined #openstack-ansible | 14:49 | |
| opendevreview | Merged openstack/openstack-ansible master: Add hardening specific variables to tests https://review.opendev.org/c/openstack/openstack-ansible/+/792639 | 14:49 |
| noonedeadpunk | #startmeeting openstack_ansible_meeting | 15:02 |
| opendevmeet | Meeting started Tue Jun 1 15:02:05 2021 UTC and is due to finish in 60 minutes. The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:02 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:02 |
| opendevmeet | The meeting name has been set to 'openstack_ansible_meeting' | 15:02 |
| noonedeadpunk | #topic rollcall | 15:02 |
| noonedeadpunk | o/ | 15:03 |
| jrosser | o/ hello | 15:04 |
| noonedeadpunk | #topic office hours | 15:07 |
| noonedeadpunk | Ok, so proably worth discussing irc change? | 15:07 |
| noonedeadpunk | Patch to docs have merged, but I'm not sure about the best way to update all our members with that | 15:08 |
| noonedeadpunk | considering we can't change topic now | 15:08 |
| noonedeadpunk | And I actually didn't got TC recomendation about having volunteers :( | 15:08 |
| jrosser | i forget to stay in the freenode channel, perhaps worth rejoining to herd people over to here | 15:08 |
| noonedeadpunk | *didn't get | 15:08 |
| noonedeadpunk | I'm keeping an eye on the channel | 15:09 |
| noonedeadpunk | *old one | 15:09 |
| *** opendevreview has quit IRC | 15:09 | |
| *** gshippey has joined #openstack-ansible | 15:09 | |
| noonedeadpunk | I wonder if it's worth to write independent ML as well | 15:10 |
| noonedeadpunk | I guess no, as one has been sent with [all] tag... | 15:10 |
| noonedeadpunk | and according to ppl number in channels, at least 50% have moved here | 15:11 |
| *** gouthamr_ has quit IRC | 15:12 | |
| noonedeadpunk | So probably we can just keeping an eye for some time and redirect using link to the https://docs.openstack.org/openstack-ansible/latest/contributor/contributing.html#irc-channel | 15:12 |
| *** gouthamr has quit IRC | 15:13 | |
| noonedeadpunk | oh, btw I did some cleanup of the projects wiki pages | 15:13 |
| noonedeadpunk | and dropped all stuf from 2015 from there... | 15:14 |
| *** gouthamr has joined #openstack-ansible | 15:14 | |
| noonedeadpunk | #idea we can continue keeping track of our etherpads on https://wiki.openstack.org/wiki/OpenStack-Ansible | 15:15 |
| jrosser | oh yes that would be helpful | 15:15 |
| noonedeadpunk | I put there only the last ones I could recall | 15:15 |
| noonedeadpunk | #agreed to use project wiki page for keeping track on etherpads | 15:17 |
| *** gouthamr is now known as identify | 15:18 | |
| noonedeadpunk | ok, so another thing is bulsseye | 15:18 |
| jrosser | should we go over what is outstanding in order to branch for W | 15:18 |
| jrosser | oh yes | 15:18 |
| noonedeadpunk | I got lxc working now | 15:19 |
| jrosser | ahha, was it systemd? | 15:19 |
| noonedeadpunk | yes and it also required extra cgroups permissins | 15:19 |
| jrosser | there was related chatter in #lxc irc channel last night | 15:19 |
| noonedeadpunk | *permissions | 15:19 |
| *** gouthamr has joined #openstack-ansible | 15:19 | |
| noonedeadpunk | so I switched from ro to mixed | 15:19 |
| jrosser | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825394 | 15:20 |
| opendevmeet | Debian bug 825394 in systemd "systemd kill background processes after user logs out" [Normal,Fixed] | 15:20 |
| noonedeadpunk | Well, systemd is "broken" since 2019 in this regard | 15:20 |
| noonedeadpunk | *apparmor | 15:20 |
| jrosser | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989317 | 15:20 |
| opendevmeet | Debian bug 989317 in systemd "systemd kill background processes after user logs out (#825394 regression)" [Normal,Open] | 15:20 |
| noonedeadpunk | but we use unconfined profile anyway | 15:20 |
| *** identify has quit IRC | 15:20 | |
| noonedeadpunk | no, that wasn't it | 15:21 |
| jrosser | unconfined had to come in for buster | 15:21 |
| noonedeadpunk | that was more apparmour and systemd-networkd in terms of trying to do weird mounts | 15:21 |
| noonedeadpunk | yeah, but we set it explicitly for 10 only:) | 15:21 |
| jrosser | aaaahhhh | 15:22 |
| noonedeadpunk | and 11 was missing templates and this thing https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/793896/1/tasks/lxc_container_config.yml | 15:22 |
| noonedeadpunk | eventually that was the reason why containers were not starting at all | 15:23 |
| noonedeadpunk | the only thing that stopps us is still linters. as eventually I missed some roles with automated patching | 15:24 |
| noonedeadpunk | because they were using template with linters included | 15:24 |
| jrosser | i need to revisit the pki role patch to the openstack-ansible repo | 15:25 |
| jrosser | move things to group_vars and make some better docs | 15:25 |
| *** opendevreview has joined #openstack-ansible | 15:25 | |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts master: Replace linters test with integarted one https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/793937 | 15:25 |
| noonedeadpunk | yeah, that's I guess close to last blocker for us | 15:25 |
| noonedeadpunk | but docs we can do even after branching with follow-up | 15:26 |
| noonedeadpunk | eventually, we can do even RC1 without branching | 15:26 |
| noonedeadpunk | but it still better to be usable | 15:26 |
| noonedeadpunk | oh, well! we also must merge our facts gathering issue | 15:27 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible/+/790042 | 15:28 |
| noonedeadpunk | ah, you just voted :) | 15:28 |
| noonedeadpunk | and we need to also fix linters on V, as things are bad there as well | 15:31 |
| noonedeadpunk | But I think we should just workaround there somehow | 15:31 |
| noonedeadpunk | Will try to look into this as well | 15:31 |
| jrosser | oh hmm i wonder if we have circular dependancies on the PKI stuff too | 15:31 |
| jrosser | in order to merge the rabbitmq and haproxy changes | 15:31 |
| noonedeadpunk | https://review.opendev.org/c/openstack/openstack-ansible/+/788031 looks like mergable? | 15:32 |
| noonedeadpunk | We just need to drop WIP from topic | 15:33 |
| jrosser | thats the one where user_variables_pki needs to go to group vars, but yes that can merge | 15:33 |
| noonedeadpunk | ahhh | 15:33 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Don't rely on compute_hosts existance https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/793954 | 15:36 |
| noonedeadpunk | haproxy should probably depend on https://review.opendev.org/c/openstack/openstack-ansible/+/788031 | 15:36 |
| noonedeadpunk | and then they all should be able to merge hopefully? | 15:36 |
| noonedeadpunk | btw, we have a fresh bug https://bugs.launchpad.net/openstack-ansible/+bug/1930276 | 15:37 |
| opendevmeet | Launchpad bug 1930276 in openstack-ansible "Nova API not restarted when nova policy is updated" [Undecided,New] - Assigned to Dmitriy Rabotyagov (noonedeadpunk) | 15:37 |
| opendevreview | Jonathan Rosser proposed openstack/openstack-ansible-haproxy_server master: Use external PKI role to manage haproxy self-signed certificates https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/790078 | 15:37 |
| noonedeadpunk | I haven't triaged it yet, was jsut about to start reproducing it | 15:37 |
| noonedeadpunk | I believe I saw how policies are applied on fly without service restart... | 15:38 |
| jrosser | oh interesting | 15:38 |
| noonedeadpunk | and I pushed all policy-to-yaml keeping that in mind... | 15:38 |
| noonedeadpunk | so it might be potentially another blocker | 15:39 |
| noonedeadpunk | not for RC1 but for branching maybe | 15:39 |
| noonedeadpunk | My plan would be to do RC1 as soon as we land PKI | 15:40 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Don't collect virtual facts https://review.opendev.org/c/openstack/openstack-ansible/+/789926 | 15:41 |
| jrosser | hmm looks complicated https://github.com/openstack/oslo.policy/blob/92eae81048b392f140e35e060e4c66195a08613e/oslo_policy/policy.py#L598 | 15:42 |
| noonedeadpunk | oh, so like if policy file was not present, it won't be loaded without restart? | 15:43 |
| jrosser | well the whole force_reload thing makes me wonder too - theres a layer of caching | 15:47 |
| noonedeadpunk | It can leverage inotify for example | 15:47 |
| noonedeadpunk | but then indeed not existent file won't be checked | 15:48 |
| noonedeadpunk | I wonder if jsut creating empty policy file is a good solution if that's how it works | 15:48 |
| jrosser | https://github.com/openstack/oslo.policy/blob/master/oslo_policy/_cache_handler.py#L25 | 15:48 |
| jrosser | not totally sure i understand why a restart fixes it | 15:51 |
| jrosser | well or rather why it's not picked up | 15:52 |
| noonedeadpunk | ok, so looking at it it seems like the same behaviour for non existent file and caching? | 15:52 |
| noonedeadpunk | I wonder actually what version it's about | 15:53 |
| noonedeadpunk | but worth testing in aio anyway imo | 15:54 |
| noonedeadpunk | As I can't fully understand code right now... | 15:54 |
| noonedeadpunk | I mean read_cached_file returns True in both cases... | 15:55 |
| jrosser | maybe also worth asking the oslo people what the expected behaviour is | 15:56 |
| jrosser | seems like it maybe up to other projects to call Enforcer.load_rules when they see fit | 15:57 |
| noonedeadpunk | yeah, might be... | 15:58 |
| jrosser | well it's in the docs actually `Whenever an API call to an OpenStack service is made, the service’s policy engine uses the appropriate policy definitions to determine if the call can be accepted. Any changes to policy.yaml are effective immediately, which allows new policies to be implemented while the service is running.` | 16:01 |
| jrosser | https://docs.openstack.org/oslo.policy/latest/admin/policy-yaml-file.html | 16:02 |
| noonedeadpunk | But I still can imagine different thing happen in reality in case policy.yaml doesn't exist... But yes, I totally saw things happening like this... | 16:03 |
| noonedeadpunk | *like written in the doc | 16:04 |
| noonedeadpunk | #endmeeting | 16:04 |
| opendevmeet | Meeting ended Tue Jun 1 16:04:12 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:04 |
| opendevmeet | Minutes: http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-06-01-15.02.html | 16:04 |
| opendevmeet | Minutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-06-01-15.02.txt | 16:04 |
| opendevmeet | Log: http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2021/openstack_ansible_meeting.2021-06-01-15.02.log.html | 16:04 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_neutron master: Replace py2 httplib2 package with py3 alternative https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/794002 | 16:06 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: [DNM] Add Debian Bullseye support https://review.opendev.org/c/openstack/openstack-ansible/+/783606 | 16:06 |
| *** miloa has quit IRC | 16:44 | |
| *** CeeMac has joined #openstack-ansible | 17:34 | |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-lxc_hosts master: Add debian bullseye support https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/793895 | 17:59 |
| *** andrewbonney has quit IRC | 18:10 | |
| *** Gue______ has quit IRC | 19:02 | |
| *** Gue______ has joined #openstack-ansible | 19:11 | |
| *** ioni has quit IRC | 19:28 | |
| *** spatel has quit IRC | 19:59 | |
| *** ioni has joined #openstack-ansible | 20:06 | |
| *** cmart has joined #openstack-ansible | 21:51 | |
| cmart | testing | 21:51 |
| *** luksky has quit IRC | 21:59 | |
| *** cmart has quit IRC | 22:01 | |
| *** odyssey4me has quit IRC | 22:06 | |
| *** spatel has joined #openstack-ansible | 22:10 | |
| *** spotz has joined #openstack-ansible | 23:01 | |
| spotz | helps to spell the channel name corrrectly | 23:01 |
| *** tosky has quit IRC | 23:11 | |
| *** masterpe[m] has joined #openstack-ansible | 23:39 | |
| *** kleini_ has joined #openstack-ansible | 23:40 | |
| *** frenzy_friday has quit IRC | 23:42 | |
| *** kleini has quit IRC | 23:43 | |
| *** frenzy_friday has joined #openstack-ansible | 23:43 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!