| *** dhill_ has quit IRC | 04:09 | |
| *** hashar has joined #openstack-dib | 07:01 | |
| *** pmannidi has quit IRC | 07:11 | |
| *** eshas has joined #openstack-dib | 07:15 | |
| *** hashar is now known as hasharAway | 07:42 | |
| *** eshas has quit IRC | 07:51 | |
| *** dhill_ has joined #openstack-dib | 13:06 | |
| *** dhill_ has quit IRC | 13:22 | |
| *** dhill_ has joined #openstack-dib | 13:22 | |
| *** hasharAway has quit IRC | 13:27 | |
| *** openstackgerrit has quit IRC | 13:34 | |
| *** vizo has quit IRC | 13:50 | |
| *** eshas has joined #openstack-dib | 14:07 | |
| eshas | Hi, Trying to create a raw rhel 7.5 image | 14:40 |
|---|---|---|
| eshas | root@neo160:~/dib/env/bin# sudo DIB_LOCAL_IMAGE=/home/esha/rhel-server-7.5-ppc64le-kvm.qcow2 ./disk-image-create -a ppc64le -o rhel75_1 -x vm rhel7 --logfile rhel_vm1.txt | 14:40 |
| eshas | but it fails in package installs - 2018-05-01 14:31:10.550 | > Not loading "rhnplugin" plugin, as it is disabled | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Not loading "product-id" plugin, as it is disabled | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Loading "search-disabled-repos" plugin | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Not loading "subscription-manager" plugin, as it is disabled | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Config time: 0.045 | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Yum version: 3.4.3 | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Setting up Package Sacks | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > There are no enabled repos. | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > Run "yum repolist all" to see the repos you have. | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > To enable Red Hat Subscription Management repositories: | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > subscription-manager repos --enable <repo> | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > To enable custom repositories: | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | > yum-config-manager --enable <repo> | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | returncode: 1 | 14:41 |
| eshas | 2018-05-01 14:31:10.550 | install-packages failed with returncode 1 | 14:41 |
| eshas | root@neo160:~/dib/env/bin# yum repolist all | 14:42 |
| eshas | repolist: 0 | 14:42 |
| eshas | I think it needs a repo atleast | 14:42 |
| eshas | My openstack environment runs on Ubuntu 16.04, how do I add rhn repo there so DIB can use them to build rhel7.5 images? | 14:56 |
| clarkb | eshas: it should be an element parameter | 14:57 |
| eshas | yeah,but repo has to be installed on system first right? | 14:57 |
| clarkb | no, that repo is relative to the image build chroot I think | 14:58 |
| clarkb | I would half expect your DIB_LOCAL_IMAGE to come with that predifined? | 14:58 |
| eshas | hmm..and repo needs username/password | 14:58 |
| eshas | this DIB_LOCAL_IMAGE is from redhat site itself | 14:59 |
| eshas | while converting to raw DIB failed | 14:59 |
| eshas | with error i pasted above | 14:59 |
| clarkb | eshas: see the elements/rhel-common/README.rst | 14:59 |
| clarkb | seems to cover this stuff | 14:59 |
| eshas | ok | 15:00 |
| *** eshas has quit IRC | 15:32 | |
| *** eshas has joined #openstack-dib | 15:36 | |
| *** dhill_ has quit IRC | 15:42 | |
| *** dhill_ has joined #openstack-dib | 15:43 | |
| eshas | sudo DIB_LOCAL_IMAGE=/home/esha/rhel-server-7.5-ppc64le-kvm.qcow2 REG_SAT_URL=https://<.com> REG_USER=<username> REG_PASSWORD=<password> REG_METHOD=satellite ./disk-image-create -a ppc64le -o rhel75_1 -x vm rhel7 --logfile rhel_vm1.txt | 16:35 |
| eshas | I am sing this command | 16:35 |
| eshas | *using | 16:36 |
| eshas | rhel-registration is failing | 16:36 |
| eshas | 2018-05-01 16:28:11.151 | Installing satellite dependencies | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | curl: (60) Peer's certificate issuer has been marked as not trusted by the user. | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | More details here: http://curl.haxx.se/docs/sslcerts.html | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | curl performs SSL certificate verification by default, using a "bundle" | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | of Certificate Authority (CA) public keys (CA certs). If the default | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | bundle file isn't adequate, you can specify an alternate file | 16:37 |
| eshas | 2018-05-01 16:28:11.673 | using the --cacert option. | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | If this HTTPS server uses a certificate signed by a CA represented in | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | the bundle, the certificate verification probably failed due to a | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | problem with the certificate (it might be expired, or the name might | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | not match the domain name in the URL). | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | If you'd like to turn off curl's verification of the certificate, use | 16:37 |
| eshas | 2018-05-01 16:28:11.674 | the -k (or --insecure) option. | 16:37 |
| eshas | 2018-05-01 16:28:11.676 | error: skipping https://ftp3.linux.ibm.com/pub/katello-ca-consumer-latest.noarch.rpm - transfer failed | 16:37 |
| eshas | 2018-05-01 16:28:11.677 | Retrieving https://ftp3.linux.ibm.com/pub/katello-ca-consumer-latest.noarch.rpm | 16:37 |
| eshas | 2018-05-01 16:28:11.677 | Registering with options: --password *** --username <myusername> | 16:37 |
| eshas | 2018-05-01 16:28:12.767 | Unable to verify server's identity: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) | 16:37 |
| eshas | My credentials are correct | 16:38 |
| eshas | is there any other way to register to RHN satellite? | 16:38 |
| eshas | Anybody using DIB to build rhel7.5 cloud-images? | 16:41 |
| eshas | Is rhel-registration of repo and yum a requirement for building the rhel cloud image? | 17:03 |
| eshas | @greghayne @tonyb | 17:03 |
| eshas | anyone uses DIB to build rhel images? | 17:04 |
| clarkb | eshas: that is telling you that the server's ssl cert was not verifiable | 17:06 |
| clarkb | it is probably a self signed cert or the name used theredoesn't match the name in the cert | 17:06 |
| eshas | which name | 17:07 |
| eshas | I use this https site and have valid creds for it which i have specified here | 17:07 |
| clarkb | ftp3.linux.ibm.com | 17:07 |
| eshas | yes | 17:08 |
| clarkb | or maybe ibm has their own CA that made teh cert for that host and you need to add it to the trust chain of your image build | 17:08 |
| eshas | thats my repo site for satellite RHN registration | 17:08 |
| eshas | hmm..how do i add my cert to DIB? | 17:08 |
| clarkb | you'll probably want an element to add it to /etc/ssl/certs or wherever they are stored on rhel | 17:09 |
| eshas | is there any public repo i can use ? | 17:09 |
| clarkb | for rhel? I don't know you would have to ask rhel | 17:09 |
| eshas | oh so that implies that repo and satellite are manadatory for rhel image to build | 17:09 |
| eshas | and these might be org specific definitely | 17:10 |
| eshas | as we use license here | 17:10 |
| *** mjturek has joined #openstack-dib | 17:12 | |
| eshas | if I have a abc.rpm or abc.deb that needs to be installed during OS install in ubuntu how can I pass that? | 17:13 |
| eshas | its basically my customised cloud-init as current cloud-init v18.2 is not getting ip info assigned in bionic vms | 17:14 |
| clarkb | you can add an element to fetch the file either off of disk or from a server then rpm -i or dpkg -i the file | 17:14 |
| eshas | but it should be done on install | 17:15 |
| eshas | so if i create an element, in its install.d I should write this script | 17:15 |
| eshas | each element also has the 7 directories and deps right? | 17:16 |
| eshas | and i want to cp it to image getting created | 17:16 |
| clarkb | yup | 17:20 |
| *** eshas has quit IRC | 17:24 | |
| *** mjturek has quit IRC | 17:52 | |
| *** mjturek has joined #openstack-dib | 18:00 | |
| *** mjturek has quit IRC | 18:00 | |
| *** mjturek has joined #openstack-dib | 18:01 | |
| *** mjturek has quit IRC | 18:05 | |
| sai_ | hey could anyone help with https://launchpad.net/diskimage-builder | 18:09 |
| clarkb | sai_: yes there are a few of us around. What do you need help with? | 18:10 |
| sai_ | clarkb: hey, so when trying to build a centos7 image with DIB i see it fail with the above bug. It works with ubuntu for the same image elements | 18:10 |
| sai_ | clarkb: https://bugs.launchpad.net/diskimage-builder/+bug/1768135 | 18:10 |
| openstack | Launchpad bug 1768135 in diskimage-builder "diskimage-builder fails to create disk image- cannot uninstall virtualenv" [Undecided,New] | 18:10 |
| clarkb | sai_: that is a side effect of the recent pip10 release. I believe that the latest release of dib fixes the issue if you update | 18:11 |
| *** dhill_ has quit IRC | 18:12 | |
| sai_ | clarkb: 2.14.1 release didnt help and there are no releases after that i believe | 18:12 |
| *** dhill_ has joined #openstack-dib | 18:15 | |
| clarkb | sai_: b423292cd0e5b3bd266e083e0a4a46f383b0960c is the commit that should've fixed it I think and was part of 2.14. I notice there is another fix if you are using rdo though which is unreleased. Are you using rdo? | 18:16 |
| sai_ | clarkb: using rdo? im just using centos7 base image. u mean rdo repos? | 18:16 |
| clarkb | yes rdo repos | 18:17 |
| clarkb | if not then 2.14.1 should work I would expect, however we use the centos-minimal element rather than centos7 element (builds image from scratch rather than basing on base image) and the testing may be missing some issue with centos7 specifically | 18:18 |
| sai_ | clarkb: negative, not using any rdo images. How do i deal with this problem now? Any debug info I can provide you that would help? | 18:19 |
| sai_ | rdo repos i meant | 18:19 |
| *** mjturek has joined #openstack-dib | 18:19 | |
| *** mjturek has quit IRC | 18:20 | |
| clarkb | sai_: are you using pip-and-virtualenv element ot install pip and virtualenv and setuptools? if not I would convert to that. If yes then there is probably a bug in that implementation that prevents this from working with the centos7 element but works with centos-minimal | 18:20 |
| clarkb | if that is the case you could switch to centos-minimal as the base distro element | 18:20 |
| clarkb | (or fix the bug) | 18:20 |
| sai_ | clarkb: im using pip-and-virtualenv element. https://github.com/openstack/shaker/blob/master/shaker/resources/image_elements/shaker-agent/element-deps#L5 | 18:22 |
| sai_ | clarkb: im a dib noob, what specifically would change between a centos7 element and a centos-minimal element | 18:23 |
| clarkb | sai_: centos7 element uses centos's published images as a starting point and builds on top of that. centos-minimal runs yum in a chroot and builds a new image from scratch by installing packages that way | 18:24 |
| clarkb | sai_: is the complete log available somewhere? | 18:25 |
| sai_ | clarkb: how do i get the complete log? run with --debug? or is there a specific plac eit logs to? | 18:26 |
| clarkb | it should be fairly verbose by default I'm assuming the log you pasted isn't the entire output from dib | 18:28 |
| clarkb | ah -x for tracing turned on | 18:29 |
| sai_ | clarkb: ack, let me attach the complete thing fro mdib | 18:29 |
| sai_ | ah | 18:29 |
| sai_ | tried --debug | 18:29 |
| sai_ | lol | 18:29 |
| clarkb | there is help output | 18:29 |
| *** mjturek has joined #openstack-dib | 18:31 | |
| *** mjturek has quit IRC | 18:32 | |
| sai_ | clarkb: thanks for ur pointers. will update bz | 18:34 |
| *** mjturek has joined #openstack-dib | 18:46 | |
| ianw | sai_: running with "-x --logfile=log.txt" will get you a helpful logfile in log.txt | 19:03 |
| *** hashar has joined #openstack-dib | 19:28 | |
| *** hashar has quit IRC | 20:00 | |
| *** mjturek has quit IRC | 20:17 | |
| sai_ | ianw: ack | 20:24 |
| *** rajinir has joined #openstack-dib | 20:51 | |
| *** openstackgerrit has joined #openstack-dib | 21:45 | |
| openstackgerrit | Oded Le'Sage proposed openstack/diskimage-builder master: Fixes add-apt-keys in dpkg element https://review.openstack.org/565599 | 21:45 |
| *** rajinir has quit IRC | 23:10 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!