Sunday, 2025-01-19

f0oVery stupid question; how can I reset my gerrit credentials?07:07
f0oI'm almost through with all the sysctl changes and would like to post those patches07:07
f0oor can I just post them to GH and offload that burden to you? haha07:12
fricklerf0o: no, submissions can only be accepted via gerrit. that said, the credentials are actually managed via your ubuntu one account. what exactly is your issue?07:30
f0ooh then I must've been a doofus07:32
f0onvmd07:32
frickler(except if you are submitting via https, then it is a mixed situation, but I wouldn't recommend that)07:33
f0oI also noticed that a lot of 3rd party modules dont allow setting custom sysctl_file parameters... like ansible-hardening, keepalived, haproxy - while others like ceph actually does it by default which is great!07:33
f0obut I patched swift, hosts, horizon modules to allow openstack_sysctl_file parameters07:33
f0ogonna post the patches to those three after the coffee hits and I become less doofus07:34
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-os_horizon master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/93959908:09
f0oI did a thing!08:09
opendevreviewDaniel Preussker proposed openstack/ansible-hardening master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/ansible-hardening/+/93960008:10
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-haproxy_server master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/93960108:11
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-openstack_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/93960208:11
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-os_swift master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/93960308:12
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-lxc_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/93960408:14
f0oI left out systemd_networkd as it seem reasonable enough to keep in /etc/sysctl.conf (enable forwarding) to override everything in /etc/sysctl.d/*08:15
f0ounfortunately keepalived will add 2 lines (non-local bind) to etc/sysctl.conf as well because its a 3rd party module (or I cant find it on gitea) - but that's reasonably safe too08:16
f0oTested against one of our hosts and it does create whatever I set in user_variables as openstack_sysctl_file (/etc/sysctl.d/99-osa.conf in my case)08:17
f0olxc_container_create has a test case for a sysctl value but it doesnt set it anywhere which is odd; so I didnt alter it08:19
jrosserf0o: thanks for the patches08:40
jrosserit would be good to follow the existing style in your defaults/main.yml where all vars defined there are prefixed with the role name08:41
jrosserthe vars which are prefixed only with openstack_ are usually defined in the openstack-ansible group_vars and serve to “wire together” similar settings across multiple roles - we need to pay attention to naming and variable precedence here to avoid unexpected results.08:47
noonedeadpunkf0o: like - `horizon_sysctl_file: "{{ openstack_sysctl_file | default('/etc/sysctl.conf') }}"08:47
noonedeadpunkso you can control each role independently, but also have a mean to set different path globally08:49
f0ooh that makes sense08:56
f0olet me fix that08:56
opendevreviewDaniel Preussker proposed openstack/ansible-hardening master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/ansible-hardening/+/93960008:58
f0o^ so like this one ?08:58
noonedeadpunkyah, looks good to me08:59
f0ook will change the rest to be like this as well :)08:59
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-haproxy_server master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/93960109:00
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-lxc_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/93960409:01
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-openstack_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/93960209:02
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-os_horizon master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/93959909:03
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-openstack_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/93960209:03
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-os_swift master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/93960309:04
f0ook thats all; had to repush hosts because I forgot the tests/test.yml09:04
noonedeadpunkactually, tests/test.yml won;'t know about role defaults09:05
f0ohrm09:06
noonedeadpunkso it didn't need a change09:06
f0owill revert that then09:07
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-openstack_hosts master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/93960209:07
f0oI assumed since the openstack_module_file is also a variable - but I guess that comes from common/setting-nodepool-variables.yml then09:08
f0oeither way as it defaults to /etc/sysctl.conf it should be safe to keep09:09
f0oproductive sunday09:09
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible-haproxy_server master: Remove extra whitespace delimiter to satisfy ansible-lint  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/93960614:22
opendevreviewDaniel Preussker proposed openstack/openstack-ansible-haproxy_server master: Make sysctl configuration path configurable Defaults to /etc/sysctl.conf to retain current behavior  https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/93960114:22
noonedeadpunkI wonder if this https://review.opendev.org/c/openstack/ansible-role-systemd_networkd/+/938560 is somehow related to failure in https://zuul.opendev.org/t/openstack/build/b21622226ea9412e9cc53bc099bf874b14:26
jrosserthis looks related https://zuul.opendev.org/t/openstack/build/b21622226ea9412e9cc53bc099bf874b/log/job-output.txt#19168-1917817:00
jrosserwhich suggests this is false https://opendev.org/openstack/ansible-role-systemd_networkd/src/branch/master/tasks/main.yml#L3417:02
jrosseralso this feels wrong https://github.com/openstack/ansible-role-systemd_networkd/blob/master/tasks/main.yml#L2817:05
jrosserwe want that to fail on os with missing vars surely17:05
noonedeadpunkI think we had that to "support" unsupported distros https://github.com/openstack/ansible-role-systemd_networkd/blob/master/tasks/main.yml#L2819:21
noonedeadpunkthere were folks who wnated to use the role outside of osa on weird distros19:21
noonedeadpunkso they wanted to jsut override vars locally instead of failing on include19:21
noonedeadpunkI'd say I'm a bit more surprised by molecule passing...19:22
noonedeadpunkas we cover all distros now, don't we?19:22
opendevreviewDmitriy Rabotyagov proposed openstack/openstack-ansible master: [doc] Add multi-AZ deployment configuration sample  https://review.opendev.org/c/openstack/openstack-ansible/+/93960919:38
jrosser but for us on jammy those tasaks should not be skipped so there is something strange happening20:04
jrosserwe should be using vars/debian.yml on ubuntu 22.04?20:05

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!