Friday, 2020-04-17

gmannabhishekk: is there policy changes recently in glance. patrole tests started failing - https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_aa4/720601/1/check/patrole-admin/aa4a224/testr_results.html00:36
*** Liang__ has joined #openstack-glance01:10
*** rcernin has quit IRC03:10
*** rcernin has joined #openstack-glance03:24
*** evrardjp has quit IRC04:37
*** evrardjp has joined #openstack-glance04:37
*** Anticimex has quit IRC05:10
*** Anticimex has joined #openstack-glance05:15
*** ratailor has joined #openstack-glance05:24
*** udesale has joined #openstack-glance05:35
*** gyee has quit IRC05:53
abhishekkgmann, this is the recent change to policy, https://review.opendev.org/#/c/716078/06:07
*** udesale has quit IRC06:26
*** udesale has joined #openstack-glance06:32
*** threestrands has quit IRC07:56
whoami-rajatHi #openstack-glance , i'm getting the following error while executing glance rootwrap08:22
whoami-rajat()[root@controller-0 babaab9326f1592e6d8219629f7f40d7]# sudo glance-rootwrap /etc/glance/rootwrap.conf umount /var/lib/glance/mnt/nfs/babaab9326f1592e6d8219629f7f4...08:22
abhishekkwhoami-rajat, is it something to do with https://github.com/openstack/glance_store/blob/master/etc/glance/rootwrap.d/glance_cinder_store.filters08:23
whoami-rajatyep, thanks abhishekk08:24
abhishekkno worries08:24
*** tkajinam has quit IRC08:51
*** Liang__ has quit IRC09:52
abhishekksmcginnis, not able to reproduce functional-py37 locally, I guess we should skip this test temporary10:08
zigoHello !10:19
zigoI'm trying to congugre glance with swift, but it doensn't work unless I set swift_store_auth_insecure=true10:20
zigoI've set the CA cert ...10:20
zigoBut it doesn't seem working.10:20
zigoSo the question is: what's the directive in /etc/glance/glance-swift.conf ?10:20
zigoIs it where it should go?10:21
zigopuppet-swift doesn't have an option for the CA in the case of the swift backend ... :/10:22
zigoThat's something I'd like to fix for my test env, in production, that's fine, I got a real SSL cert, though that's kind of annoying...10:28
*** szaher has joined #openstack-glance10:34
*** brinzhang has quit IRC10:35
*** belmoreira has joined #openstack-glance11:47
*** belmoreira has quit IRC11:48
*** belmoreira has joined #openstack-glance11:48
*** tkajinam has joined #openstack-glance11:56
*** udesale_ has joined #openstack-glance12:02
openstackgerritRajat Dhasmana proposed openstack/glance_store master: Add lock per share for  cinder nfs mount  https://review.opendev.org/71687412:03
*** tkajinam has quit IRC12:04
*** udesale has quit IRC12:05
*** rcernin has quit IRC12:11
openstackgerritRajat Dhasmana proposed openstack/glance_store master: Add lock per share for cinder nfs mount/umount  https://review.opendev.org/71687412:59
whoami-rajatand finally this will make glance totally work with cinder nfs as store ^^13:00
*** ratailor has quit IRC13:16
*** ratailor has joined #openstack-glance13:17
*** ratailor has quit IRC13:20
*** ratailor has joined #openstack-glance13:23
gmannabhishekk: but that is just deprecating not removal and patrole is testing glance policy via default policy.13:26
*** ratailor has quit IRC13:26
*** ratailor has joined #openstack-glance13:26
*** jv has quit IRC13:28
*** ratailor has quit IRC13:33
*** jv has joined #openstack-glance13:35
*** ratailor has joined #openstack-glance13:35
*** ratailor has quit IRC13:38
jokke_zigo: I'll try to look into it13:41
jokke_zigo: any indication what breaks there?13:41
jvwhoami-rajat, good news!14:09
whoami-rajatthanks jv14:10
jokke_whoami-rajat: I know I sound like a fecking broken record, but yet again, is there any reason why all this did not go into os_brick instead of the consuming service?14:12
whoami-rajatjokke_, all the change are regarding maintaining state of the host on which the shares are mounted, it's much safer to have all the locks and thread sync code executing on the host rather than the node containing os-brick14:28
whoami-rajatjokke_, it's the same reason we have drivers in cinder and nova handling the synchronization part and just using os-brick for mounting (which too is eliminated on this patch)14:29
jokke_whoami-rajat: so my point is there is no visibility difference if this all mount code was part of os_brick imported from cinder driver vs. living in the glance_store. The main difference is what you just brought out. Now we need this in Cinder, Nova and Glance and keep all three maintained istead of just in os_brick14:34
jokke_which I thought was the whole point of os_brick but recent events have been proving me wrong on that more than once lately14:38
whoami-rajatjokke_, os_brick handles most of the types but i feel there is an exception with filesystem type drivers, since we mount/unmount the directory on the local host, there should exist code to handle their races as well.14:59
*** belmoreira has quit IRC15:12
gmannabhishekk: so my worry is if some changes broke the deployment like patrole testing default policy is broken suddenly. I need to debug that what change exactly caused those failure but if you have something on top of your mind.15:26
zigojokke_: When I set swift_store_auth_insecure=False I get an error 500 when I upload an image to Glance, even if I have swift_store_cacert set correctly.15:39
zigoI have to set it to True to get it to work, that's the issue...15:40
zigojokke_: FYI, that's with Train.15:42
jokke_zigo: thanks, that helps already to narrow it down. I'll try to poke it soon. Likely won't have anything for you today, but hopefully Monday15:56
zigojokke_: Thanks ! :)15:57
jokke_zigo: and that is with py3 or py27?15:57
zigojokke_: I'm the OpenStack Debian package maintainer, therefore, I'm using all with py3 since a long time ! (Debian was the first distro to do the switch)15:57
jokke_zigo: I remember that, just haven't used debian for years. My good old memories with Debian was that they are alway the last ones to pick up anything new :P15:58
jokke_zigo: so nothing personal, just used to the fact that with Debian you gotta be used to old software15:59
zigojokke_: s/Debian/Ubuntu/ ...15:59
zigoThings happen in Debian Sid *first*, and then elsewhere.15:59
zigoI can promiss you it's truth.15:59
jokke_;)15:59
zigoIt's just that everyone uses stable, very few use testing/sid.15:59
jokke_but yeah, that should be everything I need to reproduce and dig into the issue itself16:00
zigo:)16:00
jokke_zigo: tru, I can't remember ever running anything but stable seriously16:00
zigojokke_: FYI, I'm using https://salsa.debian.org/openstack-team/debian/openstack-cluster-installer (which I wrote).16:00
zigoNothing special with it, it uses puppet-openstack which is used by a lot of people.16:01
jokke_ohh my16:03
jokke_I was hoping something actually sensible from you :P16:03
*** udesale_ has quit IRC16:23
*** gyee has joined #openstack-glance16:31
*** evrardjp has quit IRC16:37
*** evrardjp has joined #openstack-glance16:37
abhishekkgmann, sorry, I was away due to medical emergency and will be away till Monday17:04
abhishekkapart from the mentioned change we don't have anything else change related to policy17:05
abhishekkin that change we have deprecated admin role as well as changed the default value as well17:05
abhishekkkindly go through the release note for details17:06
gmannabhishekk: ohk, no issue. please take care.17:12
*** rosmaita has quit IRC18:25
*** rosmaita has joined #openstack-glance18:26
*** gyee has quit IRC23:10

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!