Sunday, 2014-10-19

*** zz_dimtruck is now known as dimtruck00:03
*** mikedillion has joined #openstack-infra00:04
fungirough recollection on ssd is consistent with what clarkb said00:07
fungiand yay afs!00:07
fungiand yes, there's nothing like roasting your own peppers for chili. i can't stand using chili powder00:25
*** harlowja_at_home has joined #openstack-infra00:29
*** achuprin_ has quit IRC00:37
*** bcourt has quit IRC00:43
*** mikedillion has quit IRC00:49
*** achuprin_ has joined #openstack-infra00:53
mordredmordred@camelot:~$ ls /afs/openstack.org01:02
mordredservice  user01:02
mordredBOOM01:02
mordredwe have an AFS cell my friends01:02
mordredfungi, clarkb: ^^01:02
mordredSergeyLukjanov: ^^01:03
jeblair(well, it's not completely set up yet, so don't try this at home, but it exists in some form!)01:03
*** michchap has joined #openstack-infra01:04
*** cnesa18 has joined #openstack-infra01:11
*** cnesa18 has quit IRC01:16
*** changbl has quit IRC01:16
fungiw00t!01:19
fungii'm reviewing the kerberos change, but slowly01:19
mordredfungi: I ahve updates...01:21
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944401:21
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945001:21
mordredfungi: ^^01:21
fungithanks... i'll see if what looked wrong is already corrected in that case01:22
clarkbpeppers acquired!01:23
clarkbthey are looking kinda sad but after hours slow cooking should be fine01:23
clarkbmordred jeblair it would probably help me at least to have a tldr of what the afs deployment looks like for a heathen that has never used it before01:25
mordredclarkb: nope. you must start running it without any help!!!01:28
mordredclarkb: we've been taking notes on the put together of it and stuff - and will also write docs01:28
mordredclarkb: but once it's walkable-throughable, we'll certainly tl;dr01:28
clarkbawesome thanks01:29
clarkbdoes kerberos determine mount perms and filesystem level file access too?01:30
mordredyup01:30
mordredwell, afs does01:30
mordredbut it uses your kerberos principal to determine who you are01:30
fungiand map to the appropriate access controls01:36
*** baoli has quit IRC01:40
*** pcrews has joined #openstack-infra01:45
*** med_ has quit IRC01:46
*** mfisch has quit IRC01:46
*** med_ has joined #openstack-infra01:46
*** mfisch` has joined #openstack-infra01:47
*** med_ has quit IRC01:47
*** med_ has joined #openstack-infra01:47
fungihrm syntax errors still, but structurally the krb5 implentation looks reasonable to me01:56
clarkbis there no existing krb5 puppet module that would work?01:57
*** cody-somerville_ has quit IRC02:01
*** salv-orlando has quit IRC02:05
*** stevemar has joined #openstack-infra02:16
*** ryanpetrello has quit IRC02:22
*** ryanpetrello has joined #openstack-infra02:22
*** dimsum_ has joined #openstack-infra02:31
*** koolhead17 has joined #openstack-infra02:50
*** fandi has quit IRC02:50
*** dimtruck is now known as zz_dimtruck03:10
*** dimsum_ has quit IRC03:21
*** yamahata has joined #openstack-infra03:22
*** flashgordon is now known as jogo03:23
*** chandan_kumar has joined #openstack-infra03:30
*** chandan_kumar has quit IRC03:37
*** SumitNaiksatam has quit IRC03:48
*** SumitNaiksatam has joined #openstack-infra03:50
*** SumitNaiksatam has quit IRC03:51
*** SumitNaiksatam has joined #openstack-infra03:52
mordredclarkb: no03:53
jeblairclarkb: take a guess?  what do you think the answer to that question is? ;)03:53
mordredclarkb: I mean, I'm sure there are 7000 half-baked modules that don't work on github and all03:54
mordredfungi: yeah - the actual code is completely and utterly untested03:54
mordredfungi: because the current install is ninjad03:54
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944403:59
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945003:59
*** _nadya_ has joined #openstack-infra04:04
*** garyh has quit IRC04:09
*** fifieldt_ has quit IRC04:14
*** harlowja_at_home has quit IRC04:17
*** dimsum_ has joined #openstack-infra04:22
*** zz_dimtruck is now known as dimtruck04:23
*** kirscht has joined #openstack-infra04:23
*** dimsum_ has quit IRC04:27
*** ivar-lazzaro has quit IRC04:38
*** ivar-lazzaro has joined #openstack-infra04:38
*** garyh has joined #openstack-infra04:40
*** ivar-lazzaro has quit IRC04:43
*** Longgeek has joined #openstack-infra04:50
*** boris-42 has quit IRC04:56
*** pcrews has quit IRC05:04
*** dimtruck is now known as zz_dimtruck05:19
*** HeOS has quit IRC05:26
*** fandi has joined #openstack-infra05:31
*** dimsum_ has joined #openstack-infra05:32
*** yfried has joined #openstack-infra05:32
*** dimsum_ has quit IRC05:37
*** SumitNaiksatam has quit IRC05:40
*** SumitNaiksatam has joined #openstack-infra05:41
*** SumitNaiksatam_ has joined #openstack-infra05:48
*** SumitNaiksatam has quit IRC05:50
*** SumitNaiksatam_ is now known as SumitNaiksatam05:50
*** otter768 has quit IRC05:57
*** sabeen1 has joined #openstack-infra05:59
*** lttrl has quit IRC06:08
*** chandan_kumar has joined #openstack-infra06:08
*** chandan_kumar has quit IRC06:10
*** stevemar has quit IRC06:13
*** _nadya_ has quit IRC06:14
*** yfried is now known as yfried|afk06:26
*** sunil_ has joined #openstack-infra06:30
*** yfried|afk is now known as yfried06:37
*** yamahata has quit IRC06:40
waynrclarkb, zaro: is there a recommend approach for dealing with plugin versions in JJB?07:12
waynrright now i'm just creating alternate functions of the form __<wrapper-name>_<version>(etc, etc2, etc3)07:14
waynrdefault behavior when version isn't specified is left to a function of the form __<wrapper-name>(etc, etc2, etc3)07:14
*** pcrews has joined #openstack-infra07:14
waynrwhich contains the original function contents07:15
*** jamespage_ has quit IRC07:16
waynri'm not as worried about the sanity of that approach as i am about how to handle the divergence in documentation between various versions07:21
*** sabeen1 has quit IRC07:22
*** pcrews has quit IRC07:31
*** alexpilotti has joined #openstack-infra07:51
*** yfried is now known as yfried|afk07:59
*** yfried|afk is now known as yfried08:10
*** davidhadas has quit IRC08:11
*** alexpilotti has quit IRC08:15
*** rlandy has joined #openstack-infra08:31
*** andreykurilin_ has joined #openstack-infra08:31
*** vb has quit IRC08:35
*** vb has joined #openstack-infra08:35
*** Longgeek has quit IRC08:46
*** Longgeek has joined #openstack-infra08:46
*** andreykurilin_ has quit IRC08:47
*** davidhadas_ has joined #openstack-infra08:49
*** Longgeek has quit IRC08:50
*** fandi has quit IRC08:55
*** salv-orlando has joined #openstack-infra09:03
openstackgerritWayne Warren proposed a change to openstack-infra/jenkins-job-builder: Update 'timeout' wrapper module  https://review.openstack.org/12946709:05
*** rushiagr_away is now known as rushiagr09:05
waynrzaro: ^^ that's what i'm talking about by the way09:05
*** salv-orlando has quit IRC09:07
*** dimsum_ has joined #openstack-infra09:09
*** rushiagr is now known as rushiagr_away09:12
*** dimsum_ has quit IRC09:14
*** _nadya__ has joined #openstack-infra09:18
*** ociuhandu has joined #openstack-infra09:28
*** yfried is now known as yfried|afk09:32
*** ociuhandu has quit IRC09:37
*** alexpilotti has joined #openstack-infra09:40
*** ociuhandu has joined #openstack-infra09:41
*** fandi has joined #openstack-infra09:43
*** davidhadas_ has quit IRC09:48
*** yfried|afk is now known as yfried10:03
*** davidhadas_ has joined #openstack-infra10:04
*** andreykurilin_ has joined #openstack-infra10:12
*** ociuhandu has quit IRC10:13
*** Longgeek has joined #openstack-infra10:14
*** ihrachyshka has joined #openstack-infra10:26
*** e0ne has joined #openstack-infra10:43
*** e0ne has quit IRC10:46
*** alexpilotti has quit IRC10:47
*** e0ne has joined #openstack-infra10:49
*** e0ne has quit IRC10:50
*** e0ne has joined #openstack-infra10:54
*** e0ne has quit IRC10:57
*** ihrachyshka has quit IRC10:58
*** e0ne has joined #openstack-infra11:00
*** mase_x200 has joined #openstack-infra11:02
*** e0ne has quit IRC11:02
*** e0ne has joined #openstack-infra11:05
*** e0ne has quit IRC11:08
*** e0ne has joined #openstack-infra11:11
*** davidhadas_ has quit IRC11:13
*** e0ne has quit IRC11:13
*** primemin7sterp has quit IRC11:40
*** primemi10sterp has quit IRC11:40
*** primemin1sterp has quit IRC11:40
*** primemin3sterp has quit IRC11:40
*** primemin8sterp has quit IRC11:40
*** 17SAAGJ3L has quit IRC11:40
*** primemin4sterp has quit IRC11:40
*** primemin9sterp has quit IRC11:40
*** primemin6sterp has quit IRC11:41
*** primemin5sterp has quit IRC11:41
*** primeministerp has quit IRC11:41
*** andreykurilin_ has quit IRC11:45
*** yfried is now known as yfried|afk11:56
*** dimsum_ has joined #openstack-infra11:59
*** yfried|afk is now known as yfried12:01
*** dimsum_ has quit IRC12:03
*** unicell has joined #openstack-infra12:06
*** mtreinish has quit IRC12:11
*** mase_x200 has quit IRC12:35
*** dimsum_ has joined #openstack-infra12:37
*** alexpilotti has joined #openstack-infra12:39
*** koolhead17 has quit IRC12:42
*** yfried has quit IRC12:45
*** andreykurilin_ has joined #openstack-infra13:16
*** Guest51022 has joined #openstack-infra13:22
*** andreykurilin_ has quit IRC13:23
*** mtreinish has joined #openstack-infra13:24
zarowaynr: i think what you'll want to do is query jenkins for the plugin version instead of making the user specify the version.  this will allow jjb to query for plugin version https://review.openstack.org/#/c/123932/13:32
*** pc_m has joined #openstack-infra13:35
*** pc_m has quit IRC13:36
*** alexpilotti has quit IRC13:37
*** unicell has quit IRC13:48
*** ihrachyshka has joined #openstack-infra13:58
*** ihrachyshka has quit IRC14:00
*** ihrachyshka has joined #openstack-infra14:04
*** ZZelle has quit IRC14:06
*** ZZelle has joined #openstack-infra14:06
*** Longgeek has quit IRC14:07
*** pc_m has joined #openstack-infra14:07
*** Longgeek has joined #openstack-infra14:07
*** pc_m has quit IRC14:13
*** ihrachyshka has quit IRC14:15
*** kashyap has joined #openstack-infra14:28
*** pc_m has joined #openstack-infra14:31
*** ihrachyshka has joined #openstack-infra14:39
*** todd_dsm has joined #openstack-infra14:41
*** ihrachyshka has quit IRC14:41
*** ihrachyshka has joined #openstack-infra14:45
*** msabramo has joined #openstack-infra14:48
*** baoli has joined #openstack-infra14:51
*** ihrachyshka has quit IRC14:55
msabramomordred et al: https://pypi.python.org/pypi/setuptools#id1 โ€” setuptools 7.0 will place the eggs it downloads (from setup_requires and such) to a separate directory called ./.eggs โ€” this prevents weirdness like failing to permanently install those packages in the virtualenv โ€” which has been a source of bugs in the past.15:02
*** ihrachyshka has joined #openstack-infra15:08
*** ihrachyshka has quit IRC15:10
*** dimsum_ has quit IRC15:16
*** dimsum_ has joined #openstack-infra15:16
*** dimsum_ has quit IRC15:21
*** dimsum_ has joined #openstack-infra15:23
*** zz_dimtruck is now known as dimtruck15:28
*** dimsum_ has quit IRC15:29
*** andreykurilin_ has joined #openstack-infra15:37
*** HeOS has joined #openstack-infra15:37
waynrzaro: oh neat, that looks useful--though i am a little concerned about how to deal with differences in feature semantics between plugin versions15:52
*** _nadya__ has quit IRC15:52
*** dimsum_ has joined #openstack-infra15:53
*** stevemar has joined #openstack-infra15:53
waynrie, will th semantics of version X.Y.Z be compatible with X+N.Y.Z such that we could adequately translate the old feature keys and their valid values into corresponding valid XML for that newer version15:54
*** sabeen has joined #openstack-infra15:54
waynrlife would be so much easier if jenkins were just written in python with an API for controlling builds and accessing information about them...(in other words if it were buildbot)15:55
*** baoli has quit IRC15:56
zarowaynr: sometimes jenkins xml elements will specify a @VERSION string.  we usually just drop the version number from the xml and that seems to work.  that will typically allows plugin upgrades to work.15:57
zarowaynr: other times the xml elements change or get renamed, in those cases the jjb module would need to handle that.15:58
waynryeah i think i ran into that with the timeout plugin, had to explicitly set values corresponding to the newer version of the plugin15:59
zarowaynr: would appreciate a review of 12393215:59
waynrokay i'll keep reading through it16:00
zarowaynr: unless there's a -1, i'll try to get that change in next week so it will be available for your timeout plugin change.16:01
*** andreykurilin_ has quit IRC16:06
*** otherwiseguy has quit IRC16:11
*** bagackiz has quit IRC16:13
*** otter768 has joined #openstack-infra16:16
*** _nadya_ has joined #openstack-infra16:23
*** Longgeek has quit IRC16:24
*** _nadya_ has quit IRC16:25
*** _nadya_ has joined #openstack-infra16:26
fungimsabramo: neat! and thanks for the heads up... hopefully it doesn't break something else in the process ;)16:28
msabramofungi: Yeah, I also hope there are no unforeseen consequences ;)16:29
msabramoonly one way to find out! :)16:29
*** emagana has joined #openstack-infra16:29
fungialso, i should take a screen capture of the zuul status page... it's completely empty (unusual even for a sunday, unless zuul's in the middle of being restarted anyway)16:29
fungior, i should go enjoy my weekend16:30
jeblairfungi: you could practice photography on your weekend!  take some lovely action shots of zuul!16:31
fungiheh16:35
*** emagana_ has joined #openstack-infra16:37
*** sabeen has quit IRC16:39
*** emagana has quit IRC16:41
*** emagana_ has quit IRC16:44
*** Guest51022 has quit IRC16:44
*** emagana has joined #openstack-infra16:44
*** e0ne has joined #openstack-infra16:49
*** emagana has quit IRC16:49
clarkbchili is chilling. now I just wait 8 hours16:53
fungisuch impatience. i usually don't eat it until the next day ;)16:55
*** e0ne has quit IRC16:55
clarkbya I like not waiting that long to eat16:56
fungiadmittedly, it takes every ounce of willpower i have to not16:56
clarkbthe leftovers are always great though16:56
*** e0ne has joined #openstack-infra16:59
fungii usually make somwhere in the vicinity of 10 liters and then portion the remainder out into 1-liter containers a couple days later and put them in the chest freezer. keeps and reheats amazingly well16:59
jeblairme too.  but before i make chili -- it's time to make brunswick stew17:00
jeblair(to which i do the same thing)17:00
fungiyep! and gumbo17:00
fungii have a freezer full of gumbo, chili, cuban red beans, stew...17:01
*** dtroyer has quit IRC17:01
fungipizza sauce, pizza dough17:02
fungithough i have to put the dough in the kitchen freezer.. my deep-freeze gets cold enough to kill yeast17:02
*** e0ne has quit IRC17:04
*** SumitNaiksatam has quit IRC17:08
*** SumitNaiksatam has joined #openstack-infra17:09
mordredclarkb: if chili is chilling, that means you have time to watch piggers and learn AFS things17:10
mordred:)17:10
clarkbI am watching seahawks17:10
mordredoh, are they seahawksing now? blast it - where is the remote ...17:11
mordrednevermind. saints are on17:11
fungioh, curry's another good one to do in large quantities. i should probably make that next17:14
*** SumitNaiksatam has quit IRC17:15
*** koolhead17 has joined #openstack-infra17:15
*** koolhead17 has joined #openstack-infra17:15
openstackgerritJames E. Blair proposed a change to openstack-infra/system-config: Manage UID/GID with puppet  https://review.openstack.org/12947617:17
*** dimsum_ has quit IRC17:19
*** dimsum_ has joined #openstack-infra17:19
jeblairthat's possibly like the most dangerous change in the world to merge, depending on what puppet does ^17:19
jeblairso i'm going to -2 it real quick like :)17:20
*** sdake_ has joined #openstack-infra17:21
*** hdd has joined #openstack-infra17:23
*** stevemar has quit IRC17:23
*** dimsum_ has quit IRC17:24
fungiif tomorrow's quiet, i can take on semi-manually updating admin account uid/gid and related file ownership on important systems17:28
fungidone that so many times when moving servers to nfs-mounted homedirs in environments without a sane id mapping service17:29
mordredfungi: I was thinking it's a good candidate for a script :)17:31
fungia _very_ carefully tested script perhaps17:32
mordredwell, yeah17:32
fungiideally you shuffle each existing user to an unused high-numbered uid/gid temporarily and then rearrange them to the ones you want17:33
fungiresetting file ownership at both points17:33
mordredoh - so I was thinking we just update /etc/passwd and then run "for user in $userlist ; do chown -R $user:$user /home/$user"17:34
*** cody-somerville_ has joined #openstack-infra17:34
mordredbecause honestly the amount of stuff owned individually be any of us on servers is going to be ... low17:34
fungithat's probably an okay approximation, but doesn't account for mis-owned files outside /home17:34
mordredthat it does not17:35
fungiwhich we may just not care to solve17:35
mordredwere you thinking 'find / -uid $uid' ?17:35
fungithat seems fine actually17:35
fungiyeah17:35
fungithat's what i've done in the past17:35
mordredclarkb: can you please explain to me why the hawks are having problems with the RAMS?17:35
clarkbbecause lol17:35
mordredI guess things are going well in Missouri currently17:36
mordredfor the sportsball17:36
fungithough that's also been when migrating servers to nfs-root where i had to worry about matching the uids and gids of system service accounts rather than just interactive user accounts17:36
fungiwhich definitely gets a lot more fiddly17:36
mordredyah17:37
mordredI mean, there will be some of that we'll need to sort out - but that will all be new work17:37
*** garyh has quit IRC17:37
*** med_ has quit IRC17:37
*** jhesketh has quit IRC17:37
*** pfallenop has quit IRC17:37
*** juice has quit IRC17:37
*** tcammann has quit IRC17:37
*** HeOS_ has quit IRC17:37
*** gnuoy has quit IRC17:37
*** roaet_ has quit IRC17:37
*** Adri2000 has quit IRC17:37
*** sressot has quit IRC17:37
*** apmelton has quit IRC17:37
*** Vek has quit IRC17:37
*** jmeridth has quit IRC17:37
*** bearhands has quit IRC17:37
*** dimtruck has quit IRC17:37
*** jroll has quit IRC17:37
*** jbryce has quit IRC17:37
*** mgagne has quit IRC17:37
*** zz_gondoi has quit IRC17:37
fungimy other concern with 129476 is the downstream story... like are we going to instantly break anyone who is cd'ing from our puppet manifests and not paying close attention? (and do we care?)17:37
*** apmelton has joined #openstack-infra17:37
*** dimtruck has joined #openstack-infra17:37
*** comstud has joined #openstack-infra17:37
*** mgagne has joined #openstack-infra17:37
*** gnuoy has joined #openstack-infra17:37
*** tcammann has joined #openstack-infra17:37
*** med_ has joined #openstack-infra17:37
*** Adri2000 has joined #openstack-infra17:37
mordredif they are installing my user account on their systems17:38
*** garyh has joined #openstack-infra17:38
*** Vek has joined #openstack-infra17:38
*** jbryce has joined #openstack-infra17:38
*** jroll has joined #openstack-infra17:38
mordredand I change my user account17:38
*** med_ has quit IRC17:38
*** med_ has joined #openstack-infra17:38
*** jmeridth has joined #openstack-infra17:38
mordredI do not care what that screws up for them17:38
*** HeOS_ has joined #openstack-infra17:38
*** mgagne is now known as Guest5283017:38
*** pfallenop has joined #openstack-infra17:38
mordredbecause $batshit17:38
*** roaet_ has joined #openstack-infra17:38
fungioh, good point, uid/gid are defaulted to unset in localuser.pp17:38
*** jhesketh has joined #openstack-infra17:38
*** juice has joined #openstack-infra17:39
jeblair(btw, this is not required for afs, it just makes the directory listings prettier, and makes it more likely that perms will be correct when things are copied out of afs across systems)17:40
*** gondoi has joined #openstack-infra17:40
*** sressot has joined #openstack-infra17:40
jeblair(afs itself does not rely on uid/gid for access control)17:40
*** dimtruck is now known as zz_dimtruck17:40
jeblair(so it's mostly for operator sanity rather than a technical requirement)17:40
fungiagreed afs won't care, but i also agree that it will be nice to have in place. oh, and we might want to pick a range which does not overlap with the uid/gid ranges in adduser.conf?17:43
jeblairfungi: i wouldn't think it would matter for regular users since they will only ever be added by puppet which will have specified ids, right?17:44
fungiin reality just not using values near-ish to 1000 is probably fine17:44
jeblairdefinitely would be good to stay away from the system account range17:45
jeblair(where packages will be creating users)17:45
fungihrm... i'd want to audit the systems first and make sure of that17:45
fungibecause, for example, the third-party packages we use may not dtrt there17:45
jeblairoh ok.  so just stay away altogether17:46
jeblair?17:46
jeblairwhat's the rhel equivalent of adduser.conf17:46
fungias you say, it's probably fine. i mean there's not any actual guarantee they even call adduser much less pass the --system option17:46
fungirhel's useradd follows /etc/login/defs i think17:47
jeblairah yep17:47
jeblairUID_MIN  50017:47
jeblairUID_MAX6000017:47
jeblairFIRST_UID=100017:48
jeblairLAST_UID=2999917:48
fungier, login.defs17:49
jeblairfungi: so you want to start our range at 2000?17:50
*** sabeen1 has joined #openstack-infra17:51
fungithat seems a sane safety17:51
openstackgerritJames E. Blair proposed a change to openstack-infra/system-config: Manage UID/GID with puppet  https://review.openstack.org/12947617:53
fungialso, we do add user objects in other places in our manifests... for example http://git.openstack.org/cgit/openstack-infra/system-config/tree/modules/gerrit/manifests/user.pp#n9 resulted in review.o.o giving gerrit2 uid=1000/gid=100317:53
jeblairaah17:53
jeblairthen yeah, i'm convinced :)17:53
fungiwhich was sort of what i was afraid of17:53
fungibut yeah, 2000 seems safe... i doubt we'll have enough random account churn on the servers to eat up 1000 uids/gids and start intersecting17:55
fungiand if we do for some reason, we can revisit then17:55
*** chuckC_ has quit IRC18:02
*** e0ne has joined #openstack-infra18:03
*** e0ne has quit IRC18:09
*** e0ne has joined #openstack-infra18:13
*** e0ne has quit IRC18:14
*** todd_dsm has quit IRC18:18
*** andreykurilin_ has joined #openstack-infra18:36
*** e0ne has joined #openstack-infra18:39
*** koolhead17 has quit IRC18:42
*** MindfulMonk has left #openstack-infra18:43
*** e0ne has quit IRC18:43
*** hdd has quit IRC18:45
*** pc_m has quit IRC18:50
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944418:53
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945018:53
mordredjeblair: I think I've captured what we know and can do with puppet there ^^18:53
mordredjeblair: I'm unpleased with teh level of indirection needed to deal with the composability and iptables - but that's just puppet being crazypants18:53
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944419:00
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945019:00
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Split haveged into its own class  https://review.openstack.org/12948719:00
*** ihrachyshka has joined #openstack-infra19:11
*** yfried has joined #openstack-infra19:16
*** e0ne has joined #openstack-infra19:18
*** e0ne has quit IRC19:21
*** boris-42 has joined #openstack-infra19:24
*** dimsum_ has joined #openstack-infra19:26
*** yfried has quit IRC19:28
*** stevemar has joined #openstack-infra19:32
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944419:32
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945019:32
mordredjeblair: I also tried to capture the basics of what's in the kerberos etherpad in the most recent kerberos patch19:32
*** ihrachyshka has quit IRC19:32
*** dimsum_ has quit IRC19:37
*** dimsum_ has joined #openstack-infra19:37
*** dimsum_ has quit IRC19:42
*** dimsum_ has joined #openstack-infra19:45
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944419:51
*** dimsum_ has quit IRC19:53
*** dimsum_ has joined #openstack-infra19:53
*** dimsum_ has quit IRC19:58
mordredjeblair, fungi: ^^ I have now tested that with --noop on kdc02 and kdc01 and I believe it's good19:58
mordredjeblair: also, the kprop script that's on kdc01 is missing something which the puppet will fix (the docs are right, the script just isn't)19:59
*** sdake_ has quit IRC20:00
*** dustins has joined #openstack-infra20:01
*** stevemar has quit IRC20:03
*** dimsum_ has joined #openstack-infra20:04
*** e0ne has joined #openstack-infra20:04
*** e0ne has quit IRC20:06
*** dimsum_ has quit IRC20:07
*** dimsum_ has joined #openstack-infra20:08
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945020:08
*** e0ne has joined #openstack-infra20:10
*** e0ne has quit IRC20:11
*** dimsum_ has quit IRC20:12
*** dimsum_ has joined #openstack-infra20:20
*** r1chardj0n3s_afk is now known as r1chardj0n3s20:27
*** _nadya_ has quit IRC20:32
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945020:34
*** chuckC_ has joined #openstack-infra20:39
mordredyou'll all be happy to know that an รค in an existing file causes puppet to complain about utf820:40
*** dimsum_ has quit IRC20:42
*** dimsum_ has joined #openstack-infra20:43
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945020:44
*** dimsum_ has quit IRC20:47
mordredjeblair: ok. that ^^ also seems to not be broken - one note being that I took a stab at just managing UserList with puppet and triggering an restart20:47
mordredjeblair: that may be overkill - but getting puppet to run bos addprinc commands seemed crazy, and we add new admin users to bos so infrequently that it seemed "better?"20:48
mordredjeblair: but would love your take on that20:48
*** andreykurilin_ has quit IRC20:48
mordredin any case - as good as puppet noop may or may not be, the puppet stack seems to at least not be something that will delete everything or cause the baby jesus to die20:49
mordred(well, except for having borked the ci-docs job ...)20:49
*** dizquierdo has joined #openstack-infra20:51
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add Kerberos config  https://review.openstack.org/12944420:52
openstackgerritMonty Taylor proposed a change to openstack-infra/system-config: Add AFS  https://review.openstack.org/12945020:52
*** dizquierdo_ has joined #openstack-infra20:55
*** mfisch` has quit IRC20:55
mordredjeblair: also, I removed the openstack.org entry from my CellServDB, restarted AFS client and I can still access /afs/openstack.org20:55
mordredjeblair: so I think the DNS SRV records are doing the right thing20:55
*** dizquierdo has quit IRC20:55
*** dizquierdo_ is now known as dizquierdo20:56
*** mfisch has joined #openstack-infra20:59
*** mfisch is now known as Guest457420:59
mordredalso - I poked tim bell to see about their use of AFS at CERN20:59
mordredhe sent me this: https://indico.cern.ch/event/271400/session/15/contribution/4/material/slides/0.pdf20:59
*** bagackiz has joined #openstack-infra21:03
*** bagackiz has joined #openstack-infra21:05
*** bagackiz has joined #openstack-infra21:06
fungithat's rather a lot of utilization21:06
*** bagackiz has quit IRC21:06
clarkbmordred the manpage I have for bos does not show a addprinc subcommand21:06
*** fabo has joined #openstack-infra21:07
*** fabo has joined #openstack-infra21:07
*** dimsum_ has joined #openstack-infra21:08
*** bagackiz has joined #openstack-infra21:08
* clarkb is trying to learn him an afs21:08
clarkbbut also cooking, beering and watching football21:09
*** bagackiz has joined #openstack-infra21:10
clarkbfungi the chili smells and looks like chili now. I dont know how you manage to cook it overnight21:10
fungii don't. i rest it overnight21:10
clarkbhrm awarm rest?21:11
clarkbI guess you only need about 160F21:11
*** bagackiz has joined #openstack-infra21:11
fungii don't cook it long at all. i roast the peppers if fresh, or toast and soak if dried (ancho, et cetera), then mash, mix with sauteed veggies, cooked corn, beans, et cetera, simmer for ~15 minutes and then cool and refrigerate for 24 hours21:11
fungioh, sautee the peppers in oil after mashing for about 30 minutes to cook out the bitterness too21:12
fungibut definitely not 8 hours. that would destroy pretty much all the capsaicin21:13
*** bagackiz has joined #openstack-infra21:13
*** bagackiz has quit IRC21:13
clarkbhuh. I roast and peel peppers. brown meat then dump everything into low heat crockpot for 8 hours21:13
clarkbfungi it comes out pretty fiery. it is oil right?21:13
fungiyep21:14
fungidepends on the peppers you use too. i'm not cooking habanero chili or anything. using mostly poblano, hatch, et cetera21:14
clarkbanaheim and jalapeno here21:15
*** bagackiz has joined #openstack-infra21:15
*** bagackiz has quit IRC21:15
*** bagackiz has joined #openstack-infra21:16
fungibut yeah, high heat for prolonged periods breaks down capsaicin pretty quickly. i guess if you're cooking it at low temps it's less destructive21:17
clarkbya I tend to get a nice layer of red oil over the top that I refuse to skim21:17
*** bagackiz has joined #openstack-infra21:18
clarkbalso bacon21:18
clarkbI need to make cornbread too21:19
*** bagackiz has joined #openstack-infra21:20
clarkbyour method seems like possibly less work21:22
clarkbwill need to give it a go21:22
*** bagackiz has joined #openstack-infra21:22
*** bagackiz has quit IRC21:22
fungii am all about optimizing21:23
clarkbthe nice thing about this way is I can use cheap stew meat and it comes out good21:23
fungiahh, right. i'm usually making bean chili instead so the stewing winds up being unnecessary21:28
*** imcsk8 has quit IRC21:28
*** imcsk8 has joined #openstack-infra21:28
*** dizquierdo_ has joined #openstack-infra21:30
anteayaI love listening to you talk recipes21:31
anteayayou both sound like great cooks21:31
jeblairfungi: oh you make "chili with beans" ;)21:32
clarkbI dont know about great. there are a handful of things I can fake :)21:32
clarkbjeblair are you from texas?21:32
clarkb:P21:32
anteayaclarkb: seems the crowd who eats your brisket are fairly convinced21:33
jeblairclarkb: no, but my second-favorite chili is :)21:33
clarkbjeblair I use beans too. I think greghaynes disapproves. but this is how I was taught21:33
*** dizquierdo has quit IRC21:33
jeblairoh, i read further, fungi is actually making bean (vegetarian) chili iiuc.  which contrary to what i expected as a carnivore, can be really really good.21:35
fungiyeah, i have to cook what the wife will eat--the challenge is to make it into something i also want to eat. if it were for me, it would be chunks of meat. in this case the beans add back the otherwise missing protein21:35
jeblairi miss the hard times cafe in raleigh.  their vegi chili was really good.21:36
clarkbI will eat just about any chili if it comes with cornbread21:37
clarkbI dont get too picky :)21:37
*** Hefeweizen has quit IRC21:37
anteayaclarkb: do you make your own cornbread?21:38
jheskethMorning21:38
anteayaI was told the secret to corn bread is buttermilk21:38
anteayamorning jhesketh21:38
clarkbanteaya I buy the box mix >_>21:39
anteayahow's turbo hipster feeling today21:39
anteayaclarkb: ah21:39
clarkbtrader joes has a mix with whole kernels in it21:39
anteayanice21:39
anteayaI like trader joes21:39
*** sabeen1 has quit IRC21:39
clarkbI find it makes a great cornbread so dont bother with extra effort21:39
*** ayoung has joined #openstack-infra21:40
jheskethanteaya: looks to be behaving21:41
anteayajhesketh: good news21:42
anteayaclarkb: you can't beat a mix that makes a good end result21:42
*** bagackiz has joined #openstack-infra21:45
*** bagackiz has quit IRC21:45
*** arnaud has joined #openstack-infra21:45
*** bagackiz has joined #openstack-infra21:47
*** bagackiz has quit IRC21:47
clarkbyup its a super useful hack21:48
*** bagackiz has joined #openstack-infra21:52
*** bagackiz has quit IRC21:52
*** bagackiz has joined #openstack-infra21:54
*** bagackiz has quit IRC21:54
mordredfungi: whoops. what I meant was "bos adduser"21:54
mordredfungi: it's kadmin addprinc21:54
*** pc_m has joined #openstack-infra21:54
* mordred just ate leftovers, so has no good cooking stories to share21:55
*** pcm_ has joined #openstack-infra21:55
*** ivar-lazzaro has joined #openstack-infra21:56
*** ivar-lazzaro has joined #openstack-infra21:57
fungimordred: yep, found it in the openafs server install guide21:57
fungihuh. board meeting tomorrow21:58
mordredyeah. should be fun21:59
*** pc_m has quit IRC21:59
*** bagackiz has joined #openstack-infra22:01
*** bagackiz has quit IRC22:01
*** bagackiz has joined #openstack-infra22:02
*** bagackiz has quit IRC22:02
*** bagackiz has joined #openstack-infra22:04
*** bagackiz has quit IRC22:04
*** bagackiz has joined #openstack-infra22:06
*** bagackiz has quit IRC22:06
*** bagackiz has joined #openstack-infra22:07
*** bagackiz has quit IRC22:07
mordredjeblair: so - I just was googling to see if anyone else had build a transactional/atomic debian archive mirror using AFS like we've discussed22:08
mordredjeblair: turns out that an IRC conversation between us is the third thing that shows up22:08
mordredso I'm going to say "no"22:08
*** bagackiz has joined #openstack-infra22:09
*** bagackiz has quit IRC22:09
*** bagackiz has joined #openstack-infra22:11
*** bagackiz has quit IRC22:11
anteayaan it looks like bagackiz is our current contestant in "spam the channel with your disconnecting client"22:12
*** bagackiz has joined #openstack-infra22:12
*** bagackiz has quit IRC22:12
anteayalets see how long this contestant is willing to play22:12
*** ChanServ sets mode: +o mordred22:13
*** mordred sets mode: +b *!*@*PanicBNC.org22:14
mordrednope22:14
anteayamordred: thank you22:15
mordredanteaya: do you have the weechat?22:15
anteayaI have the weechat22:15
mordreddo you know about alt-= ?22:16
anteayano22:16
mordredI'm about to be your new best friend22:16
mordredpress it22:16
anteayawhat should I know about alt-=22:16
anteayayou already are22:16
mordredyay!22:16
mordredanteaya: alt-= toggles the smartfilter stuff22:16
anteayaokay22:16
mordredanteaya: so it'll make all of the join/parts go away22:16
anteayaI see not change22:16
anteayaah22:16
anteayawhich is fine for me22:16
anteayathough that does not help me advocate for those without the weechat22:17
mordredclarkb: why did alt-= not do things for anteaya ?22:17
mordredanteaya: it's possible you have to enable smartfilter first ...22:17
anteayait has22:17
mordredoh! it did? great22:17
anteayaI see no more join/parts22:17
mordredwoot22:17
mordredI like that it's easily toggleable22:18
mordredbecause sometimes I need to see that22:18
mordredbut most of the time I'm not interested22:18
anteayabut what I am saying is that fixing join/parts for me doesn't help my goal in being a good advocate for those without the weechat22:18
anteayaright22:18
anteayamakes sense22:18
* anteaya toggles again22:18
mordredgotcha22:18
anteayaand thanks22:18
anteayayou were and still are my new best friend22:19
anteaya:D22:19
mordredI agree - it would not be a thing that would allow you to achieve that goal22:19
mordredyay!22:19
anteaya\o/22:19
clarkbya you have to enable smartfilters22:20
anteayaoh22:20
anteayait seems there have been no join/parts in the log for me to see anyway22:20
anteayahow do I enable smartfilters?22:20
* anteaya is reading http://help.lockergnome.com/linux/Bug-632601-weechat-smart-filter-join-part-quit-messages-defa--ftopict539593.html22:22
anteayaah http://www.weechat.org/files/doc/weechat_faq.en.html#filter_irc_join_part_quit22:22
*** rlandy has quit IRC22:24
*** alexpilotti has joined #openstack-infra22:26
*** dimsum_ has quit IRC22:28
*** dimsum_ has joined #openstack-infra22:28
anteayathanks, it is enabled now22:31
*** dimsum_ has quit IRC22:32
*** dimsum_ has joined #openstack-infra22:34
*** pcm_ has quit IRC22:39
*** changbl has joined #openstack-infra22:43
*** dizquierdo_ has quit IRC22:48
*** msabramo has quit IRC22:48
*** alexpilotti has quit IRC22:50
openstackgerritRussell Sim proposed a change to openstack-infra/jenkins-job-builder: Print context when key fails to be formatted  https://review.openstack.org/12949222:54
*** yamamoto has joined #openstack-infra22:56
*** alexpilotti has joined #openstack-infra22:57
*** HeOS has quit IRC22:57
*** HeOS has joined #openstack-infra22:59
*** camunoz has joined #openstack-infra23:08
*** arnaud has quit IRC23:10
*** koolhead17 has joined #openstack-infra23:33
*** dustins has quit IRC23:35
ianwpleia2: probably should just fork puppetlabs-apache and call it something else, unless someone wants to go an translate all the custom templates currently there into puppetese23:36
*** stevemar has joined #openstack-infra23:40
*** sdake_ has joined #openstack-infra23:43
mordredianw: we keep talking about wanting to get off of our fork23:49
openstackgerritAngus Lees proposed a change to openstack-infra/project-config: Add pylint check for neutron  https://review.openstack.org/12949323:51
pleia2mordred: yeah, ianw was about 7 patchsets in to getting back with upstream last week before the Abandoned button was hit :\23:51

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!