Wednesday, 2023-02-01

moha7Misconfiguration: I forgot to set `image_hosts` in the `openstack_user_config.yml` as I though it behaviour like Cinder settings that does not need to the option `storage_hosts`when you have your Ceph cluster somewhere.05:52
moha7After deployment I noticed that there's not any glance container.05:53
moha7Now, how can I run the `setup-hosts.yml`saying it to create just the glance stuff there? Is it enough to use `--tags lxc-containers-create` alongside the YML setup file? Does also need more settings injection by other tags?06:00
moha7I think the tag `lxc-hosts` is necessary too, for creating log path for glance, right?06:14
jrossermoha7: does this help? https://docs.openstack.org/openstack-ansible/latest/admin/maintenance-tasks.html#container-management06:28
jrosseri don't really think that tags is the thing you want in this case06:28
moha7How do you run `systemctl restart apache2; sleep 1s; systemctl status apache2` on all Keystone and Horizon containers from your deployment server?07:31
moha7There's a tip here (for Galera): https://docs.openstack.org/openstack-ansible/latest/admin/maintenance-tasks.html#start-a-cluster that didn't work in my deployer server07:33
moha7https://docs.openstack.org/openstack-ansible/latest/admin/maintenance-tasks.html#container-management >> I didn't understand it07:53
moha7I am running  all those 3 `setup-<x>` yml files again!08:15
jrossermoha7: those galera maintainance tasks have worked for other people, can you be a bit more specific?08:18
jrossermoha7: read the container management section about "destroy / create containers"08:19
jrosserif you add a new group or fixup your openstack_user_config.yml for the missing glance containers you should be able to create them with `openstack-ansible lxc-containers-create.yml --limit "CONTAINER_NAME"`08:19
jrosserwhere CONTAINER_NAME is the hostname or ansible group that you want to create08:20
jrosserjust re-running all the playbooks is going to take forever08:20
damiandabrowskimorning09:42
damiandabrowskijrosser: do you have any idea why gating does not start for this change? :|09:42
damiandabrowskihttps://review.opendev.org/c/openstack/openstack-ansible/+/87232809:42
damiandabrowski(i just realized that this dependency probably doesn't make any sense)09:43
jrosserwell, go here https://zuul.openstack.org/buildsets?change=872328]09:44
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible master: Define some temporary vars for haproxy  https://review.opendev.org/c/openstack/openstack-ansible/+/87232809:44
jrosseroops https://zuul.openstack.org/buildsets?change=87232809:44
damiandabrowskii'm not sure what dequeued means in this context :| but gating stared after removing dependency to https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87226209:48
jrosserthat takes you to here https://zuul.openstack.org/buildset/5615ade430fb45309d8103210187f01b09:49
jrosserat which point i think you end up having to ask the #opendev people what actually that means09:49
damiandabrowskihowever, i think we may need to merge it to fix gating, so if anyone has a moment, review would be highly appreciated: https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87226209:50
damiandabrowskithanks jrosser !09:50
jrosseroh well i think github reverted their change which made a bunch of download SHA change09:50
jrosserso the problem with hatop has gone away09:51
jrosserdamiandabrowski: see https://github.com/orgs/community/discussions/4583009:51
damiandabrowskiah sweet, thanks!09:53
moha7jrosser: `ansible galera_container -m shell -a "cat /var/lib/mysql/grastate.dat"` --> https://postimg.cc/Q9L3fvZn10:28
moha7> read the container management10:28
moha7Sure, Tnx10:28
moha7I saw something cool in the Keystone config file: A comment with the keyword "FIXME" (:10:51
jrossermoha7: you are not in the openstack-ansible directory there, can you try that instead?11:03
moha7Ah. `ansible all_containers --list-hosts` worked there11:15
*** dviroel|uot is now known as dviroel|rover11:30
moha7There're no cinder packages on Computes! Then the option `storage_hosts` is required to be set in `openstack_user_config.yml` file. But on what, on `*compute_hosts`? (Note: I'm going to connect it to my Ceph cluster in a way that cinder goes to Ceph nodes by ssh to pick ceph configs up; I just added some options in `user_variables.yml`)11:46
jrossermoha7: cinder does not need to be on the compute hosts for ceph12:16
jrossermoha7: see this https://opendev.org/openstack/openstack-ansible/src/branch/master/playbooks/common-playbooks/nova.yml#L48-L6112:17
moha7Oops, I run it to be deployed on computes!12:22
jrossernooooo :)12:23
jrosseryou know there is already a built in ceph scenario in the AIO that you could use as reference?12:24
jrosserfor openstack-ansible there is a role called "ceph_client" which is used everywhere that ceph needs to be consumed, like compute hosts12:24
moha7Yes, I know there's some scenarios; But I don't know where they are documented (:12:43
moha7`export SCENARIO='aio_lxc_barbican_ceph_lxb'`?12:44
moha7seems it's not!12:46
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87118812:53
moha7How can I see all scenarios?12:53
damiandabrowskii think we don't have any place where they all all documented, some examples can be found here: https://docs.openstack.org/openstack-ansible/latest/user/aio/quickstart.html12:59
damiandabrowskiyou can look at the code to find all of them: https://codesearch.openstack.org/?q=bootstrap_host_scenario&i=nope&literal=nope&files=&excludeFiles=&repos=openstack/openstack-ansible13:00
damiandabrowskiso basically you can put service names there, ceph, ovs, lxb, metal, lxc, ceph, nfs, proxy, infra etc.13:02
anskiyHello! I'm trying to create LXC-based deployment in VMs, with non-root `ansible_user`, and I'm having so much trouble with that. First of which been that `lxc-info`, which runs without sudo doesn't see any of the created LXC containers. Is this supported, or am I supposed to SSH as root on hosts for deployment?13:05
jrosseranskiy: non root has been a long term goal for ages but no one has put the effort in to fix everything13:20
anskiyI see, thank you!13:26
jrossermoha7: it might be worth you spending some time understanding the different CI jobs we run, as these cover various combinations of ceph, lxc, lxb, etc13:53
jrossertake a look at https://review.opendev.org/c/openstack/openstack-ansible/+/869748 and press "zuul summary" - you'll see a bunch of different scenarios there which are all possible to use yourself in a VM13:55
jrosserjob `openstack-ansible-deploy-aio_ceph-ubuntu-jammy` is directly equivalent to SCENARIO=aio_ceph13:56
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible-haproxy_server master: Prepare haproxy role for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/87118814:51
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Allow git servers for openstack services and tempest to be overridden  https://review.opendev.org/c/openstack/openstack-ansible/+/86974814:57
*** dviroel|rover is now known as dviroel|rover|lunch15:06
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Add facility to rewrite source URLs for ansible collections during bootstrap  https://review.opendev.org/c/openstack/openstack-ansible/+/87082015:21
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Add facility to rewrite source URLs for ansible collections during bootstrap  https://review.opendev.org/c/openstack/openstack-ansible/+/87082015:21
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Update ansible openstack collection to 2.0.0  https://review.opendev.org/c/openstack/openstack-ansible/+/87242115:24
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Remove support for calico ml2 driver.  https://review.opendev.org/c/openstack/openstack-ansible/+/86611915:36
spatelFeel like LinuxBridge at end of light - https://youtu.be/MSbB3L9_MeY?t=207315:38
spatelActually here - https://youtu.be/MSbB3L9_MeY?t=211115:39
mgariepyspatel, yep15:44
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Test on ARM64  https://review.opendev.org/c/openstack/openstack-ansible/+/87242315:45
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Test on ARM64  https://review.opendev.org/c/openstack/openstack-ansible/+/87242315:47
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Disable fact variables  https://review.opendev.org/c/openstack/openstack-ansible/+/77839615:49
*** dviroel|rover|lunch is now known as dviroel|rover15:57
opendevreviewJonathan Rosser proposed openstack/openstack-ansible master: Add validation zuul job for hosts setup  https://review.opendev.org/c/openstack/openstack-ansible/+/84300216:08
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Test multiple keystone containers for os_keystone tests  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/84371416:13
opendevreviewJonathan Rosser proposed openstack/openstack-ansible-os_keystone master: Test multiple keystone containers for os_keystone tests  https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/84371416:13
*** rpittau is now known as elfosardo16:34
*** elfosardo is now known as rpittau16:43
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible master: Prepare service roles for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118916:50
*** dviroel_ is now known as dviroel|rover_18:36
*** dviroel|rover_ is now known as dviroel|rover18:38
*** dviroel_ is now known as dviroel|rover19:51
bjoerntDid anyone ask already if OSA is making a release for each branch affected per https://security.openstack.org/ossa/OSSA-2023-002.html ?21:18
jrosserbjoernt: i believe that X,Y,Z are released to cover that21:35
jrossersee https://review.opendev.org/q/topic:release_osa21:35
jrosserand https://review.opendev.org/q/topic:bump_osa21:35
opendevreviewDamian Dąbrowski proposed openstack/openstack-ansible master: Prepare service roles for separated haproxy config  https://review.opendev.org/c/openstack/openstack-ansible/+/87118922:00

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!