| *** ysandeep|out is now known as ysandeep | 01:59 | |
| opendevreview | Merged openstack/openstack-ansible master: Return facts gathering to pre_tasks for masakari https://review.opendev.org/c/openstack/openstack-ansible/+/846580 | 02:32 |
|---|---|---|
| *** akahat is now known as akahat|ruck | 04:39 | |
| snadge | i feel bad for telling this story, but i've been hacking away at a test deployment, chopping and changing config and running into various self inflicted problems.. after suffering what seems long enough, i decided not to skip the step of deploying an aio using the same version, just to get a better feel for it | 06:03 |
| snadge | but its into a vsphere vm on a san (about 80GB allocated to it) .. and its been running for several hours | 06:05 |
| snadge | telling this story made me think to check the allocated resources and i forgot i reduced that vm down to 1 cpu core because i wasn't using it anymore.. impressive :P | 06:07 |
| *** arxcruz|rover is now known as arxcruz | 06:55 | |
| *** ysandeep is now known as ysandeep|afk | 07:11 | |
| snadge | its finally finished.. i set run tempest tests to false because i knew they likely wouldn't succeed.. but it still errored out in "os_tempest : List tempest tests" | 07:49 |
| snadge | 'NoneType' object is not iterable | 07:49 |
| opendevreview | Adrien Cunin proposed openstack/openstack-ansible-galera_server master: Don't specific password in debian.cnf https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847537 | 07:53 |
| jrosser_ | snadge: please file a big report including the relevant output | 08:04 |
| jrosser_ | bug report (!) | 08:05 |
| Adri2000 | if any one experienced mariadb crashes in wallaby, please have a look at the bug report I just filed: https://bugs.launchpad.net/openstack-ansible/+bug/1979728 | 08:08 |
| noonedeadpunk | I'd say that worth bumping mariadb version anyway | 08:26 |
| noonedeadpunk | At least because of CVEs mentioned here https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/842106 | 08:26 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server stable/xena: Bump mariadb version. https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847435 | 08:27 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server stable/xena: Bump mariadb version. https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847435 | 08:27 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server stable/xena: Bump mariadb version. https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847435 | 08:29 |
| noonedeadpunk | Adri2000: feel free to propose patch to upgrade mariadb version to 10.5.16 | 08:31 |
| noonedeadpunk | Adri2000: also regarding https://bugs.launchpad.net/openstack-ansible/+bug/1979726 - I think that mysqlclient prioritizes socket over password. So even when password is set, it ignores it and tries socket auth firsth | 08:36 |
| noonedeadpunk | Because if try using this file for client with passowrd, auth still will pass `mysql --defaults-file=/etc/mysql/debian.cnf` | 08:38 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Do not place debian.cnf when root user not touched https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847546 | 08:46 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-galera_server master: Switch galera_root_user default value https://review.opendev.org/c/openstack/openstack-ansible-galera_server/+/847547 | 08:48 |
| *** ysandeep|afk is now known as ysandeep | 09:00 | |
| fanfi | hi, could sb help me pls. Looks like i need last ansible collection to install. I getting following error :ERROR! couldn't resolve module/action 'git_config'. This often indicates a misspelling, missing collection, or incorrect module path. | 09:22 |
| noonedeadpunk | fanfi: you get it in some of your custom playbook right? | 09:30 |
| noonedeadpunk | I beleive it should be part of community.general collection | 09:31 |
| noonedeadpunk | maybe you should set it's name explicitly, like community.general.git_config ? | 09:31 |
| fanfi | yes i found it and install, but still getting the error | 09:32 |
| fanfi | i am still in bootstrap collection install step | 09:33 |
| noonedeadpunk | So it occurs during bootstrap-ansible.sh execution? | 09:33 |
| fanfi | yes | 09:34 |
| noonedeadpunk | what version you're trying to boostrap? | 09:34 |
| fanfi | root@deploy:/opt/openstack-ansible# git branch -a | 09:36 |
| fanfi | * master | 09:36 |
| fanfi | remotes/origin/HEAD -> origin/master | 09:36 |
| noonedeadpunk | fanfi: what does `/opt/ansible-runtime/bin/ansible-galaxy collection list --collections-path /etc/ansible/` say? | 09:43 |
| noonedeadpunk | I can't reproduce that on test VM fwiw | 09:44 |
| fanfi | https://paste.openstack.org/show/btIAtmB35YIWGJh4kAcS/ | 09:47 |
| noonedeadpunk | fanfi: how you got `community.general 5.2.0 `? | 09:53 |
| noonedeadpunk | It's set to 5.0.0 in https://opendev.org/openstack/openstack-ansible/src/branch/master/ansible-collection-requirements.yml#L13-L14 | 09:54 |
| fanfi | yeh, i played with different version on 5.0.0 i got the same error | 09:55 |
| noonedeadpunk | if you replace git_config with community.general.git_config here https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/get-ansible-role-requirements.yml#L35 is it the same? | 09:58 |
| noonedeadpunk | Also, do you run it as /bootstrap-ansible.sh or tried just to run command like ` /opt/ansible-runtime/bin/ansible-playbook get-ansible-role-requirements.yml` ? | 10:00 |
| fanfi | as bootstrap-ansible.sh | 10:01 |
| fanfi | ERROR! couldn't resolve module/action 'community.general.git_config'. This often indicates a misspelling, missing collection, or incorrect module path. | 10:01 |
| noonedeadpunk | I'd assume smth is wrong with ENV | 10:02 |
| noonedeadpunk | Very important part of that is definition of following environment variable: ANSIBLE_COLLECTIONS_PATH="/etc/ansible" | 10:03 |
| noonedeadpunk | if it's not set or not passed for some reason - like different shell or some restrictions, then installed collections won't be found | 10:04 |
| noonedeadpunk | and it feels like the case here. | 10:04 |
| noonedeadpunk | But we handle that in script https://opendev.org/openstack/openstack-ansible/src/branch/master/scripts/bootstrap-ansible.sh#L204 | 10:05 |
| noonedeadpunk | maybe you have `ANSIBLE_COLLECTIONS_PATHS` defined somewhere? | 10:07 |
| fanfi | i used the default location | 10:11 |
| noonedeadpunk | tbh I'm not sure what can be wrong except location where collections are cloned or path set by ANSIBLE_COLLECTIONS_PATH/ANSIBLE_COLLECTIONS_PATHS | 10:46 |
| *** ysandeep is now known as ysandeep|brb | 11:01 | |
| *** ysandeep|brb is now known as ysandeep | 11:18 | |
| *** dviroel|out is now known as dviroel | 11:19 | |
| *** ysandeep is now known as ysandeep|afk | 12:12 | |
| jrosser_ | fanfi__: have you installed ansible yourself also with apt or pip? or manually installed any collections with ansible-galaxy? | 12:46 |
| fanfi__ | i am just follow the instruction guide on fresh node, than i got the issue with corporate network reg. galaxy ansible. So than i swap galaxy resource for collections with git. | 12:51 |
| noonedeadpunk | I spawned bunch of VMs with ubuntu 20.04 in previous several days and boostrap-ansible.sh was working as designed... I still think it's some issue with environment variables or indeed having ansible isntalled from packages or having some ansible.cfg somewhere... | 12:53 |
| noonedeadpunk | like some restricted shell instead of bash or smth like that | 12:54 |
| noonedeadpunk | what `which bash` would return you? | 12:55 |
| fanfi__ | thanks a lot, yes it's a issue with corporate network, but i am not sure how i can fix it or find workaround | 12:56 |
| fanfi__ | < /usr/bin/bash | 12:56 |
| fanfi__ | i am using ubuntu image from maas | 12:57 |
| noonedeadpunk | Well, you can fork things to some corporate git repo as example... | 12:57 |
| noonedeadpunk | but you will have more issues in future. | 12:57 |
| noonedeadpunk | so pbasivally you might need to mirror a lot of stuff at the end | 12:57 |
| *** ysandeep|afk is now known as ysandeep | 12:58 | |
| fanfi__ | i tried to create sock5 tunell out of the netwrok, but i got error so pip do not know sock5 ....sothing like that | 13:00 |
| jrosser_ | 1:51 PM <fanfi__> than i got the issue with corporate network reg. galaxy ansible. So than i swap galaxy resource for collections with git | 13:08 |
| jrosser_ | can you share what you changed here? ^^ | 13:08 |
| jrosser_ | does this mean your network blocks the galaxy api? | 13:08 |
| fanfi__ | https://paste.openstack.org/show/baPRrPGDEb7iQ3UDHUZG/ | 13:11 |
| fanfi__ | yes network blocks galaxy api | 13:11 |
| fanfi__ | ssl error | 13:12 |
| fanfi__ | when i set sock5 proxy i got following error: Error parsing proxy URL socks5://localhost:4444: Unsupported scheme ‘socks5’. | 13:16 |
| jrosser_ | well, socks doesnt really work like that | 13:36 |
| jrosser_ | the proxy settings in OSA are for http proxies, not socks | 13:37 |
| fanfi__ | i am tried to find some free https proxys, but i was not succeeded | 13:45 |
| noonedeadpunk | vpn?:) | 14:26 |
| fanfi__ | hm...good idea :) i will try | 14:47 |
| admin1 | fanfi__, you can bootstrap in a vm/container/lxc in your own laptop and just copy the /etc/ansible and /opt/opentack folder also | 14:53 |
| admin1 | i have not tried it myself but just a thought | 14:53 |
| admin1 | or you can ssh from network to your own vm/public host ( a cheap vm somewhere, open a socks proxy ) and then configure git to use that .. like git config --global http.proxy 'socks5://127.0.0.1:4444 .. where 4444 is the socks you opened up | 14:55 |
| admin1 | or socks5h | 14:56 |
| *** ysandeep is now known as ysandeep|out | 15:00 | |
| jrosser_ | I don’t thing you can set http proxy env vars to be socks5:// | 15:14 |
| jrosser_ | “Error parsing proxy URL socks5://localhost:4444: Unsupported scheme ‘socks5’.” | 15:15 |
| *** dviroel is now known as dviroel|lunch | 15:19 | |
| fanfi__ | i have fresh openstac-ansible folder and i get syntax error with get-ansible-collection-req... line 16, column 3.. | 15:31 |
| fanfi__ | i am able to create VPN connection so i will try it | 15:33 |
| spatel | install vpn client on OSA box and connect to VPN server which allow you internet access | 15:45 |
| spatel | worst case connect your phone to your server and use hotspot :D (just kidding) | 15:47 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: [DNM] Temporary disable ARA installation https://review.opendev.org/c/openstack/openstack-ansible/+/847590 | 15:47 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Temporary disable ARA installation https://review.opendev.org/c/openstack/openstack-ansible/+/847590 | 15:47 |
| *** dviroel|lunch is now known as dviroel | 16:18 | |
| admin1 | jrosser_, this works fine .. git config --global http.proxy 'socks5h://127.0.0.1:1234' ( where 1234 is your tunnel port) .. | 17:36 |
| admin1 | socks5h instead of just socks5 | 17:36 |
| admin1 | clone via https .. .if cloning via git,(ssh) then not | 17:37 |
| jrosser_ | admin1: that might well work for git but i'm not so sure about wget/curl/python | 17:45 |
| admin1 | export ALL_PROXY=socks5h://127.0.0.1:1234 wget/curl/ etc works for most | 18:03 |
| admin1 | i would just wireguard a tunnel out :) | 18:04 |
| noonedeadpunk | given that we can't merge a thing due to post failures, I will go on and release 25.0.0 from rc1. All bugfixes we have and about to land are from Xena and I think can be backported later... Despite I;d love them to land asap, we likely can't do that today anyway. | 18:06 |
| jrosser_ | i am all day behind unrouted networks and proxies and i get this https://paste.opendev.org/show/bosvVRx0F4NAzmSIXSmE/ | 18:17 |
| admin1 | when I do just curl gw.am ( gw.am is my own domain to lookup ip info) , i get my home IP .. when I ssh to a machine and open a socket and then do export ALL_PROXY=socks5h://127.0.0.1:1234 ; curl gw.am , i get the IP of the ssh box | 18:58 |
| admin1 | i have not tried dns over socks5h though | 18:58 |
| jrosser_ | socksv5 optionally has the dns resolution done at the proxy server | 19:00 |
| jrosser_ | so thats all a bit variable | 19:00 |
| jrosser_ | i think our is based on the NEC implementation https://www.halolinux.us/security/the-nec-socks5-proxy-server.html | 19:01 |
| admin1 | https://gist.githubusercontent.com/a1git/9c9a4336d2bc892f5a9083202697904a/raw/dfd78cb3e52509c37fac10b2bf6756534332a673/gistfile1.txt | 19:06 |
| jrosser_ | yeah, so my test was with wget which doesnt work | 19:06 |
| jrosser_ | curl does | 19:06 |
| jrosser_ | and python doesnt, until you have the pysocks python module installed, so thats a bit hit/miss | 19:07 |
| jrosser_ | tbh expecting an OSA deploy to work like this is pretty optimisitc | 19:07 |
| admin1 | yeah | 19:07 |
| admin1 | i want to add wireguard support to neutron .. but i have zero idea where/how to begin :) | 19:09 |
| fanfi_ | heeeeyaa :D System is bootstrapped and ready for use. | 19:12 |
| jrosser_ | what did it take in the end? :) | 19:13 |
| fanfi_ | just VPN :D | 19:13 |
| fanfi_ | first fight :D | 19:14 |
| jrosser_ | interesting security model on the network there | 19:14 |
| admin1 | congrats | 19:14 |
| jrosser_ | you can't do what you want.... but you can subvert it all with a vpn :) | 19:14 |
| fanfi_ | it is :D ...yes thanks guys | 19:15 |
| noonedeadpunk | well, it's quite tough actually to fight with openvpn as example, through 443 port... | 19:41 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/yoga: Update doc index page https://review.opendev.org/c/openstack/openstack-ansible/+/847397 | 19:45 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Continue Zed development https://review.opendev.org/c/openstack/openstack-ansible/+/847272 | 19:45 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Continue Zed development https://review.opendev.org/c/openstack/openstack-ansible/+/847272 | 19:45 |
| noonedeadpunk | btw it would be good to have another review on https://review.opendev.org/c/openstack/openstack-ansible-os_zun/+/847363 and https://review.opendev.org/c/openstack/openstack-ansible/+/847362 | 19:45 |
| noonedeadpunk | damiandabrowski[m]: spotz ^ | 19:46 |
| noonedeadpunk | I got time until monday to merge/backport | 19:46 |
| spotz | I popped them open will take a look | 19:46 |
| noonedeadpunk | thanks! | 19:48 |
| noonedeadpunk | we also need https://review.opendev.org/c/openstack/openstack-ansible/+/846799 but it fails with post failures now... | 19:50 |
| spotz | noonedeadpunk: comment on https://review.opendev.org/c/openstack/openstack-ansible/+/847272 | 19:53 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Continue Zed development https://review.opendev.org/c/openstack/openstack-ansible/+/847272 | 19:54 |
| noonedeadpunk | oh, yes, sure! | 19:54 |
| noonedeadpunk | I will keep re-checking things during weekends. Would be so sweet to fix them in 25.0.0 tag... | 19:56 |
| noonedeadpunk | Tripleo also struggling with same post failures now afaik | 19:58 |
| opendevreview | Merged openstack/openstack-ansible-tests stable/yoga: Update TOX_CONSTRAINTS_FILE for stable/yoga https://review.opendev.org/c/openstack/openstack-ansible-tests/+/846775 | 20:26 |
| *** dviroel is now known as dviroel|out | 20:50 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!