| noonedeadpunk | NeilHanlon: hm, I'm checking for docker images for Rocky 10, and I don't see same ubi-init image we used to use for molecule on 9 | 07:49 |
|---|---|---|
| noonedeadpunk | do you happen to know anything about that? | 07:50 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add C10S and Rocky jobs https://review.opendev.org/c/openstack/openstack-ansible/+/955150 | 08:10 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add C10S and Rocky jobs https://review.opendev.org/c/openstack/openstack-ansible/+/955150 | 08:11 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add C10S and Rocky jobs https://review.opendev.org/c/openstack/openstack-ansible/+/955150 | 08:13 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add C10S and Rocky 10 jobs https://review.opendev.org/c/openstack/openstack-ansible/+/955150 | 08:16 |
| gillesMo | Hello ! I want to remove unused services from my deplyment : ceilometer, gnocchi, aodh, heat. Is there a way with the playbooks or am I forced to do all of that manually ? | 08:36 |
| gillesMo | Removing LXC conainers is easy, but purging galera, rabbitmq, haproxy... Ans ceilometer has some baremetal systemd services... Not so easy | 08:40 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Add C10S and Rocky 10 jobs https://review.opendev.org/c/openstack/openstack-ansible/+/955150 | 09:00 |
| noonedeadpunk | gillesMo: well, for haproxy you kinda can define a service as absent, which should work | 09:02 |
| noonedeadpunk | I think there is possibility to make a playbook for such clean-up, but I don't we have one out of the box today | 09:03 |
| noonedeadpunk | smth like this: https://paste.openstack.org/show/bXpEV8HgpFxfaOiHfMI1/ | 09:06 |
| gillesMo | Thanks noonedeadpunk | 09:12 |
| damiandabrowski | interesting, I just found a strange behavior of ignore_errors: "{{ ansible_check_mode }}" when it's used in a loop | 10:20 |
| damiandabrowski | it ignores error even when ansible_check_mode = false.... | 10:20 |
| damiandabrowski | https://paste.opendev.org/show/bo3sdiZptfsCHPMTyhUi/ | 10:20 |
| damiandabrowski | potentially, it may affect us because we do the same thing here: https://opendev.org/openstack/ansible-role-pki/src/branch/master/tasks/main_certs.yml#L32 | 10:22 |
| noonedeadpunk | that kinda sucks then.... | 10:27 |
| jrosser | when is _pki_install_certificates_defs not defined? | 10:48 |
| damiandabrowski | it's enough if one of the variables inside _pki_install_certificates_defs is not defined | 10:53 |
| damiandabrowski | example: https://paste.opendev.org/show/bkMNF74kbN8wu6itKja3/ | 10:55 |
| jrosser | hmmm i still don't really understand where we encounter that in a real situation, where it's not an error | 11:24 |
| jrosser | which we wouldnt otherwise control with `default()` or `when: item.foo is defined` | 11:25 |
| noonedeadpunk | if you're still about ansible_check_mode - it was specifically for role to pass with --check | 11:25 |
| jrosser | right, and in that case some previous var or register doesnt contain the expected things? | 11:26 |
| noonedeadpunk | if it's first time run - you don;'t generate certs at all | 11:27 |
| noonedeadpunk | so you have nothing to slurp kinda | 11:27 |
| noonedeadpunk | but you will cert creation module showing as changed at least... | 11:27 |
| noonedeadpunk | but make tasks relying on cert existing to fail | 11:28 |
| noonedeadpunk | (or private key to begin with) | 11:28 |
| jrosser | well it might be simpler to put `when: not ansible_check_mode` on some particularly troublesome tasks | 11:40 |
| jrosser | and then it is also possible to later do `when foo is not skipped` | 11:40 |
| noonedeadpunk | if ansible_check_mode resolves to true even when not set - I guess it would make things even worse? | 11:40 |
| jrosser | but check mode is really tricky | 11:40 |
| jrosser | i think its always defined? | 11:41 |
| jrosser | as true or false | 11:42 |
| noonedeadpunk | oh... I misinterpret https://paste.opendev.org/show/bo3sdiZptfsCHPMTyhUi/ | 11:42 |
| noonedeadpunk | but wait. how it happens then | 11:42 |
| jrosser | i must say i am still unsure of that actual situation tbh | 11:43 |
| jrosser | but i can completely understand how the code can fail if some tasks don't generate the expected files to slurp | 11:44 |
| noonedeadpunk | so having `ignore_errors: False` there explicitly does fail | 11:45 |
| jrosser | part of the error in the example paste is using an undfined var in the loop: statement | 11:45 |
| noonedeadpunk | so it's kinda matter of ansible_check_mode resolution I guess | 11:46 |
| jrosser | oh, or is it /o\ | 11:46 |
| noonedeadpunk | https://paste.opendev.org/show/bkXVJVfwbsqWWRrrAAv6/ | 11:47 |
| noonedeadpunk | damiandabrowski: it might be worth to try to report bug to ansible, dunno | 11:50 |
| noonedeadpunk | as it looks off | 11:50 |
| noonedeadpunk | and according to this comment it should resolve vars https://github.com/ansible/ansible/issues/76138#issuecomment-952088721 | 11:51 |
| noonedeadpunk | as this also is ignored: https://paste.opendev.org/show/bdbJhWnmj6KktEayP0Us/ | 11:53 |
| noonedeadpunk | like vars are just not resolved there at all anymore | 11:53 |
| damiandabrowski | ack | 11:54 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-os_cinder stable/2025.1: Remove project_id from Cinder endpoint https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/955183 | 12:45 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Offload kernel module management to openstack_hosts https://review.opendev.org/c/openstack/openstack-ansible/+/953685 | 12:50 |
| opendevreview | Merged openstack/openstack-ansible-os_swift master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/954852 | 13:04 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/954733 | 13:09 |
| opendevreview | Merged openstack/openstack-ansible-os_horizon master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/954862 | 13:14 |
| opendevreview | Merged openstack/openstack-ansible-os_neutron master: tox: Drop basepython (used only python3) and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/954869 | 13:14 |
| opendevreview | Merged openstack/openstack-ansible-os_keystone master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/954864 | 13:20 |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts master: Fix sync of /etc/apt/mirrors/ to container base image. https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/954980 | 13:47 |
| opendevreview | Merged openstack/openstack-ansible-lxc_hosts master: tox: Drop basepython (used only python3) and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-lxc_hosts/+/954730 | 13:47 |
| opendevreview | Merged openstack/openstack-ansible-memcached_server master: Always install netcat-openbsd on debian https://review.opendev.org/c/openstack/openstack-ansible-memcached_server/+/954986 | 14:11 |
| opendevreview | Merged openstack/openstack-ansible-haproxy_server master: Always install netcat-openbsd on debian https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/954985 | 14:12 |
| opendevreview | Merged openstack/openstack-ansible-haproxy_server master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/954201 | 14:12 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Remove special case for CentOS 8 https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/886761 | 14:15 |
| opendevreview | Merged openstack/openstack-ansible-repo_server master: Fix role idempotency https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/951319 | 14:24 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Drop rootwrap.d creation https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/953307 | 14:25 |
| opendevreview | Merged openstack/openstack-ansible-plugins master: Add debian trixie as a supported platform https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/954976 | 14:31 |
| opendevreview | Merged openstack/openstack-ansible-openstack_hosts master: Ensure sudo is installed before configuring it https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/953202 | 14:39 |
| opendevreview | Merged openstack/openstack-ansible-os_swift master: Clean-up "Create drive-audit cron job" https://review.opendev.org/c/openstack/openstack-ansible-os_swift/+/954853 | 14:43 |
| opendevreview | Merged openstack/openstack-ansible-os_cinder master: Remove project_id from Cinder endpoint https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/955089 | 14:45 |
| opendevreview | Merged openstack/openstack-ansible-os_cinder master: tox: Remove ineffective ignore_basepython_conflict and bump minimum version https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/954858 | 14:45 |
| opendevreview | Merged openstack/openstack-ansible-repo_server master: Clean-up nginx-related task after 2025.1 release https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/951320 | 14:46 |
| jrosser | i wonder which of these we should use instead of libpcre3 https://packages.debian.org/search?suite=trixie&arch=amd64&searchon=names&keywords=libpcre2 | 15:09 |
| jrosser | seems like just once choice on redhat vs lots on debian | 15:09 |
| opendevreview | Merged openstack/openstack-ansible-os_cinder master: Clean-up "Remove the old db_sync fact" https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/954860 | 15:12 |
| opendevreview | Merged openstack/openstack-ansible-os_nova master: Allow to skip discovered mdevs https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/950558 | 15:13 |
| noonedeadpunk | I wonder if there is difference | 15:17 |
| noonedeadpunk | I think it should be libpcre2-posix3 | 15:18 |
| noonedeadpunk | as rest are 8/16/32 bit runtimes | 15:18 |
| jrosser | i wasnt sure what that meant tbh | 15:29 |
| jrosser | and this is not much help https://codesearch.opendev.org/?q=libpcre2&i=nope&literal=nope&files=&excludeFiles=&repos= | 15:29 |
| jrosser | which makes me wonder how much this actually is needed | 15:30 |
| opendevreview | Merged openstack/openstack-ansible-os_glance master: Switch cinderstore job to noble https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/954320 | 15:36 |
| opendevreview | Merged openstack/openstack-ansible-lxc_container_create master: Remove duplicated default configuration parameters https://review.opendev.org/c/openstack/openstack-ansible-lxc_container_create/+/951242 | 15:51 |
| noonedeadpunk | FWIW, was pointed to this bug about live migration failures: https://gitlab.com/qemu-project/qemu/-/issues/1937 We have pretty much all regions and versions affected by it | 16:08 |
| noonedeadpunk | pretty much the way to reproduce - stress-ng --vm 4 --vm-bytes 14G --vm-keep on a 16gb VM | 16:09 |
| jrosser | i was just seeing in #nova | 16:09 |
| jrosser | looks like a bad bug | 16:09 |
| noonedeadpunk | yup | 16:09 |
| noonedeadpunk | as the only currently available workaround - set this to false: https://opendev.org/openstack/openstack-ansible-os_nova/src/branch/master/templates/nova.conf.j2#L279 | 16:10 |
| noonedeadpunk | or rolling back to tunneling | 16:11 |
| noonedeadpunk | (nova_libvirtd_listen_tls: 0) | 16:12 |
| opendevreview | Merged openstack/openstack-ansible-os_skyline stable/2025.1: Ensure u-c are used for Skyline installation https://review.opendev.org/c/openstack/openstack-ansible-os_skyline/+/954355 | 16:14 |
| noonedeadpunk | jrosser: this has an ansible task with another workaround: https://issues.redhat.com/browse/RHEL-103240?focusedId=27595864&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-27595864 | 16:32 |
| jrosser | hmmm yes looks like we need to get that sorted out | 16:36 |
| noonedeadpunk | I have not yet even decided what evil is better... | 16:37 |
| noonedeadpunk | potentially disabling aes sucks the least, but I'm not sure if it's gonna be applied to already running VMs | 16:39 |
| jrosser | also I wonder if we need a master sha bump | 16:52 |
| jrosser | my trixie tempest blew up a lot on threading things which I expect are addressed | 16:53 |
| noonedeadpunk | I don't think all of them are, but I can make one, sure | 17:03 |
| opendevreview | Merged openstack/openstack-ansible master: Do not disable configure_mirrors extra repos for debian https://review.opendev.org/c/openstack/openstack-ansible/+/954316 | 18:58 |
| opendevreview | Merged openstack/openstack-ansible master: Define bootstrap_host_public_address in AIO defaults https://review.opendev.org/c/openstack/openstack-ansible/+/953577 | 18:58 |
| opendevreview | Merged openstack/openstack-ansible master: Make AIO networks configurable https://review.opendev.org/c/openstack/openstack-ansible/+/953675 | 19:00 |
| opendevreview | Merged openstack/openstack-ansible stable/2024.1: Bump SHAs for 2024.1 https://review.opendev.org/c/openstack/openstack-ansible/+/950887 | 19:00 |
| opendevreview | Merged openstack/openstack-ansible stable/2024.1: Do not disable configure_mirrors extra repos for debian https://review.opendev.org/c/openstack/openstack-ansible/+/954339 | 19:00 |
| opendevreview | Merged openstack/openstack-ansible stable/2024.1: Remove upgrade jobs from 2023.2 https://review.opendev.org/c/openstack/openstack-ansible/+/950888 | 19:00 |
| opendevreview | Merged openstack/openstack-ansible stable/2024.2: Do not require full git & autoconf on EL https://review.opendev.org/c/openstack/openstack-ansible/+/951621 | 19:05 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible stable/2023.2: Bump SHAs for EOL-ing 2023.2 https://review.opendev.org/c/openstack/openstack-ansible/+/950893 | 19:15 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible master: Bump SHAs for master https://review.opendev.org/c/openstack/openstack-ansible/+/955226 | 19:15 |
| noonedeadpunk | jrosser: sorry almost forgot ^ | 19:15 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-os_cinder stable/2025.1: Remove project_id from Cinder endpoint https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/955183 | 19:19 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/2025.1: Ensure sudo is installed before configuring it https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/955230 | 19:20 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/openstack-ansible-openstack_hosts stable/2025.1: Ensure sudo is installed before configuring it https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/955230 | 19:21 |
| opendevreview | Merged openstack/openstack-ansible master: Use the master branch of the openstack.osa collection for dev work https://review.opendev.org/c/openstack/openstack-ansible/+/954979 | 19:33 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/953740 | 21:37 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: WIP https://review.opendev.org/c/openstack/openstack-ansible/+/953740 | 21:42 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Replace usage outdate egrep to grep https://review.opendev.org/c/openstack/openstack-ansible/+/953740 | 21:42 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/openstack-ansible/+/953740 | 21:43 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 21:46 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 21:46 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/ansible-hardening/+/955242 | 21:47 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/ansible-hardening/+/955242 | 21:51 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/ansible-hardening/+/955242 | 21:53 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/ansible-hardening/+/955242 | 21:55 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: wip https://review.opendev.org/c/openstack/ansible-hardening/+/955247 | 21:56 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: wip https://review.opendev.org/c/openstack/ansible-hardening/+/955247 | 21:57 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Clean-up "Remove old config block for V-72223 from openstack-ansible-security" https://review.opendev.org/c/openstack/ansible-hardening/+/955247 | 21:58 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-ops master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/openstack-ansible-ops/+/955250 | 22:11 |
| opendevreview | Ivan Anfimov proposed openstack/openstack-ansible-ops master: Replaced usage outdate egrep to grep https://review.opendev.org/c/openstack/openstack-ansible-ops/+/955250 | 22:13 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:18 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:18 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:19 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:19 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:20 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Use doc8 for documentation generation https://review.opendev.org/c/openstack/ansible-hardening/+/710284 | 22:21 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Remove outdate file manual-test.rc https://review.opendev.org/c/openstack/ansible-hardening/+/955251 | 22:23 |
| opendevreview | Ivan Anfimov proposed openstack/ansible-hardening master: Remove outdate file manual-test.rc https://review.opendev.org/c/openstack/ansible-hardening/+/955251 | 22:24 |
| opendevreview | Merged openstack/openstack-ansible master: Use platform_check role for AIO bootstrap https://review.opendev.org/c/openstack/openstack-ansible/+/951695 | 22:50 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!