Monday, 2019-02-25

*** markvoelker has quit IRC00:06
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [wip] fix opensuse pip-and-virtualenv  https://review.openstack.org/63859400:09
*** pcrews has joined #openstack-infra00:31
*** yamamoto has joined #openstack-infra00:36
*** yamamoto has quit IRC00:41
*** sdake has joined #openstack-infra00:46
*** gregoryo has joined #openstack-infra00:46
*** sdake has quit IRC01:03
*** sdake has joined #openstack-infra01:06
*** wolverineav has joined #openstack-infra01:06
ianwi think gentoo is rebuilding enough stuff that it might be in danger of hitting timeouts01:07
ianwit seems to be rebuilding gcc01:08
*** hwoarang has quit IRC01:14
*** hwoarang has joined #openstack-infra01:16
*** sdake has quit IRC01:19
*** armax has quit IRC01:28
*** bhavikdbavishi has joined #openstack-infra01:28
*** dave-mccowan has joined #openstack-infra01:30
*** dave-mccowan has quit IRC01:35
*** wolverineav has quit IRC01:36
*** armax has joined #openstack-infra01:42
*** yamamoto has joined #openstack-infra02:06
*** markvoelker has joined #openstack-infra02:07
*** yamamoto has quit IRC02:09
*** rkukura has quit IRC02:11
ianwtook 1+h ... i guess over time we'll see this in the graphs now02:17
*** jamesmcarthur has joined #openstack-infra02:17
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [wip] fix opensuse pip-and-virtualenv  https://review.openstack.org/63859402:19
*** armax has quit IRC02:23
*** dave-mccowan has joined #openstack-infra02:24
*** rkukura has joined #openstack-infra02:32
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [wip] fix opensuse pip-and-virtualenv  https://review.openstack.org/63859402:34
*** markvoelker has quit IRC02:37
*** bhavikdbavishi has quit IRC02:50
*** hongbin has joined #openstack-infra02:52
*** wolverineav has joined #openstack-infra02:53
*** dave-mccowan has quit IRC02:53
*** jamesmcarthur has quit IRC02:59
*** jamesmcarthur has joined #openstack-infra03:00
*** sdake has joined #openstack-infra03:02
*** wolverineav has quit IRC03:02
*** jamesmcarthur has quit IRC03:05
*** whoami-rajat has joined #openstack-infra03:12
*** yamamoto has joined #openstack-infra03:14
*** ykarel|away has joined #openstack-infra03:18
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Fix opensuse 42.3 pip-and-virtualenv  https://review.openstack.org/63859403:20
*** ykarel|away is now known as ykarel03:20
*** ramishra has joined #openstack-infra03:21
*** hongbin has quit IRC03:30
*** jamesmcarthur has joined #openstack-infra03:30
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: executor: add zuul_release_nodeset Ansible action  https://review.openstack.org/63900203:32
*** markvoelker has joined #openstack-infra03:35
*** janki has joined #openstack-infra03:35
*** sdake has quit IRC03:36
*** jamesmcarthur has quit IRC03:36
*** sdake has joined #openstack-infra03:42
*** jamesmcarthur has joined #openstack-infra03:45
*** jamesmcarthur has quit IRC03:51
*** udesale has joined #openstack-infra03:51
*** jamesmcarthur has joined #openstack-infra03:53
*** sdake has quit IRC03:56
*** bhavikdbavishi has joined #openstack-infra03:56
*** yamamoto has quit IRC03:57
*** markvoelker has quit IRC04:03
*** yamamoto has joined #openstack-infra04:03
*** jamesmcarthur has quit IRC04:09
*** jamesmcarthur has joined #openstack-infra04:12
*** wolverineav has joined #openstack-infra04:12
*** wolverineav has quit IRC04:17
*** udesale has quit IRC04:21
*** sdake has joined #openstack-infra04:22
*** udesale has joined #openstack-infra04:22
*** spsurya has joined #openstack-infra04:25
*** sdake has quit IRC04:25
*** sdake has joined #openstack-infra04:28
*** jamesmcarthur has quit IRC04:30
*** sdake has quit IRC04:30
*** sdake has joined #openstack-infra04:31
*** jamesmcarthur has joined #openstack-infra04:31
*** sdake has quit IRC04:35
*** sdake has joined #openstack-infra04:36
*** sdake has quit IRC04:40
*** sdake has joined #openstack-infra04:41
openstackgerritIan Wienand proposed openstack-infra/project-config master: DIB grafana dashboard small fixes  https://review.openstack.org/63900704:44
*** sdake has quit IRC04:45
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Fix opensuse 42.3 pip-and-virtualenv  https://review.openstack.org/63859404:45
*** sdake has joined #openstack-infra04:51
*** sdake has quit IRC04:55
*** sdake has joined #openstack-infra04:56
openstackgerritIan Wienand proposed openstack-infra/project-config master: DIB grafana dashboard small fixes  https://review.openstack.org/63900704:59
*** yamamoto has quit IRC04:59
*** sdake has quit IRC05:00
*** markvoelker has joined #openstack-infra05:00
*** janki has quit IRC05:02
*** sdake has joined #openstack-infra05:02
*** jamesmcarthur has quit IRC05:05
*** sdake has quit IRC05:10
*** sdake_ has joined #openstack-infra05:12
*** bhavikdbavishi has quit IRC05:12
*** bhavikdbavishi has joined #openstack-infra05:13
*** sdake_ has quit IRC05:15
*** sdake has joined #openstack-infra05:16
openstackgerritMerged openstack-infra/project-config master: DIB grafana dashboard small fixes  https://review.openstack.org/63900705:18
*** sdake has quit IRC05:21
*** sdake has joined #openstack-infra05:22
*** sdake has quit IRC05:26
*** sdake has joined #openstack-infra05:29
*** sdake has quit IRC05:30
*** sdake_ has joined #openstack-infra05:31
*** markvoelker has quit IRC05:33
*** jamesmcarthur has joined #openstack-infra05:35
*** sdake_ has quit IRC05:35
openstackgerritMerged openstack/os-performance-tools master: Update home-page  https://review.openstack.org/63034205:36
*** sdake has joined #openstack-infra05:36
openstackgerritTristan Cacqueray proposed openstack-infra/nodepool master: Add python-path option to label  https://review.openstack.org/63733805:37
openstackgerritIan Wienand proposed openstack-infra/nodepool master: [dnm] testing rhel8 images  https://review.openstack.org/63901305:39
*** jamesmcarthur has quit IRC05:40
*** sdake has quit IRC05:45
*** bhavikdbavishi has quit IRC05:45
*** wolverineav has joined #openstack-infra05:47
*** wolverineav has quit IRC05:48
*** sdake has joined #openstack-infra05:48
*** wolverineav has joined #openstack-infra05:48
*** sdake has quit IRC05:51
*** sdake has joined #openstack-infra05:53
*** sdake has quit IRC05:55
*** sdake has joined #openstack-infra05:57
*** sdake has quit IRC06:00
*** dpawlik has joined #openstack-infra06:01
*** sdake has joined #openstack-infra06:02
*** larainema has quit IRC06:02
*** sdake has quit IRC06:06
*** sdake_ has joined #openstack-infra06:06
*** sdake_ has quit IRC06:10
*** jamesmcarthur has joined #openstack-infra06:11
*** jamesmcarthur has quit IRC06:16
*** jtomasek has joined #openstack-infra06:17
openstackgerritNoam Angel proposed openstack/diskimage-builder master: Add option to skip update packages  https://review.openstack.org/63606006:31
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: Add bionic nodeset for legacy job to switch to bionic  https://review.openstack.org/63901806:35
*** chandankumar has quit IRC06:39
*** chandankumar has joined #openstack-infra06:40
*** quiquell|off is now known as quiquell06:48
*** jamesmcarthur has joined #openstack-infra06:53
*** ykarel has quit IRC06:57
*** jamesmcarthur has quit IRC06:58
*** ykarel has joined #openstack-infra06:58
*** AJaeger has quit IRC07:05
*** slaweq has joined #openstack-infra07:11
openstackgerritChandan Kumar proposed openstack-infra/project-config master: Add github gnocchixyz/gnocchi to project list  https://review.openstack.org/63609307:15
*** aojea has joined #openstack-infra07:20
*** pgaxatte has joined #openstack-infra07:23
openstackgerritMerged openstack/diskimage-builder master: Fix opensuse 42.3 pip-and-virtualenv  https://review.openstack.org/63859407:24
*** AJaeger has joined #openstack-infra07:24
*** udesale has quit IRC07:27
*** udesale has joined #openstack-infra07:27
*** bhavikdbavishi has joined #openstack-infra07:30
*** yamamoto has joined #openstack-infra07:30
*** markvoelker has joined #openstack-infra07:30
*** jamesmcarthur has joined #openstack-infra07:33
*** yamamoto has quit IRC07:34
openstackgerritTristan Cacqueray proposed openstack-infra/zuul master: Add depends-on support to frozen jobs API  https://review.openstack.org/63902207:35
*** jamesmcarthur has quit IRC07:37
*** florianf has joined #openstack-infra07:39
*** yamamoto has joined #openstack-infra07:41
*** yamamoto has quit IRC07:41
*** yamamoto has joined #openstack-infra07:44
*** ykarel is now known as ykarel|lunch07:45
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix missing semaphore release around dequeue  https://review.openstack.org/63902307:46
*** bhavikdbavishi has quit IRC07:54
*** wolverineav has quit IRC07:57
*** kjackal has joined #openstack-infra08:01
*** ginopc has joined #openstack-infra08:03
*** markvoelker has quit IRC08:03
*** kopecmartin|off is now known as kopecmartin08:06
*** ykarel_ has joined #openstack-infra08:09
*** ykarel|lunch has quit IRC08:11
*** ykarel_ is now known as ykarel08:11
openstackgerritMerged openstack/diskimage-builder master: set rhel minor release  https://review.openstack.org/63606308:11
*** kjackal has quit IRC08:12
*** kjackal has joined #openstack-infra08:13
kashyapHey, folks -- indexing is behind by 76 hours: http://status.openstack.org/elastic-recheck/08:14
*** tkajinam has quit IRC08:14
kashyapAnyone know when will it start indexing again?08:14
*** takamatsu_ has quit IRC08:19
*** dtantsur|afk is now known as dtantsur08:21
*** takamatsu_ has joined #openstack-infra08:21
*** bhavikdbavishi has joined #openstack-infra08:23
*** florianf has quit IRC08:30
*** electrofelix has joined #openstack-infra08:31
*** quiquell is now known as quiquell|brb08:31
*** takamatsu_ has quit IRC08:32
*** jamesmcarthur has joined #openstack-infra08:33
*** zbr|ssbarnea has joined #openstack-infra08:34
*** jamesmcarthur has quit IRC08:38
*** takamatsu_ has joined #openstack-infra08:38
*** ccamacho has joined #openstack-infra08:45
openstackgerritHelena proposed openstack-infra/project-config master: Add rsd-virt-for-nova project  https://review.openstack.org/63863308:46
*** iurygregory has joined #openstack-infra08:46
*** jpena|off is now known as jpena08:48
openstackgerritMerged openstack/diskimage-builder master: update spelling errors  https://review.openstack.org/62909608:49
*** e0ne has joined #openstack-infra08:51
*** stakeda has joined #openstack-infra08:52
*** tosky has joined #openstack-infra08:55
kashyapclarkb: When you're about: https://review.openstack.org/#/c/638757/ ("Capture the content of 'audit.log' file)08:56
*** yboaron has joined #openstack-infra08:57
*** rcernin has quit IRC09:00
*** markvoelker has joined #openstack-infra09:01
*** roman_g has joined #openstack-infra09:02
*** yboaron_ has joined #openstack-infra09:02
*** jpich has joined #openstack-infra09:03
*** yboaron has quit IRC09:05
*** quiquell|brb is now known as quiquell09:07
*** shardy has joined #openstack-infra09:08
*** gregoryo has quit IRC09:08
*** jamesmcarthur has joined #openstack-infra09:10
*** cmorpheus is now known as cmurphy09:12
*** zbr|ssbarnea is now known as zbr|out09:13
*** jamesmcarthur has quit IRC09:14
*** shardy has quit IRC09:23
*** shardy has joined #openstack-infra09:23
*** owalsh_ is now known as owalsh09:23
*** derekh has joined #openstack-infra09:30
*** yamamoto has quit IRC09:32
*** markvoelker has quit IRC09:34
*** wolverineav has joined #openstack-infra09:36
*** ccamacho has quit IRC09:38
*** wolverineav has quit IRC09:41
*** jamesmcarthur has joined #openstack-infra09:49
*** gfidente has joined #openstack-infra09:52
*** jamesmcarthur has quit IRC09:54
*** jamesmcarthur has joined #openstack-infra09:59
*** sshnaidm|off is now known as sshnaidm10:05
*** ykarel_ has joined #openstack-infra10:12
*** ccamacho has joined #openstack-infra10:13
*** ykarel has quit IRC10:14
*** yamamoto has joined #openstack-infra10:19
*** yamamoto has quit IRC10:20
fricklerkashyap: there seems to be an issue with the logstash-workers indeed10:20
kashyapNod10:20
fricklerinfra-root: on ls-worker01 all logs end more than two weeks ago with a connection refused message similar to this: http://paste.openstack.org/show/746020/10:21
*** ykarel_ is now known as ykarel10:21
fricklerI'll leave them in this state for now in case somebody wants to investigate further. maybe they all just need a restart10:21
*** ginopc has quit IRC10:22
*** helenafm has joined #openstack-infra10:23
*** markvoelker has joined #openstack-infra10:31
*** yamamoto has joined #openstack-infra10:34
*** jaosorior has joined #openstack-infra10:37
*** yamamoto has quit IRC10:39
*** ccamacho has quit IRC10:43
*** ccamacho has joined #openstack-infra10:43
*** ccamacho has quit IRC10:45
*** trident has quit IRC10:47
*** yamamoto has joined #openstack-infra10:49
*** trident has joined #openstack-infra10:50
*** stakeda has quit IRC10:50
*** jamesmcarthur has quit IRC10:50
*** yamamoto has quit IRC10:51
*** markvoelker has quit IRC11:04
*** yamamoto has joined #openstack-infra11:04
openstackgerritMerged openstack-infra/glean master: write dns info to networkd  https://review.openstack.org/61010711:05
*** yamamoto has quit IRC11:09
*** ccamacho has joined #openstack-infra11:12
*** ccamacho has quit IRC11:13
*** ccamacho has joined #openstack-infra11:14
*** udesale has quit IRC11:18
openstackgerritFrode Nordahl proposed openstack-infra/project-config master: Add ``ceph-rbd-mirror`` charm and dependencies  https://review.openstack.org/63906611:21
*** snapiri has quit IRC11:23
*** bhavikdbavishi has quit IRC11:27
*** ccamacho has quit IRC11:28
*** kjackal has quit IRC11:34
*** finucannot is now known as stephenfin11:40
*** sdake has joined #openstack-infra11:46
*** sdake has quit IRC11:50
*** sdake has joined #openstack-infra11:51
*** sdake has quit IRC11:55
*** sdake has joined #openstack-infra11:56
*** ccamacho has joined #openstack-infra11:59
*** sdake has quit IRC12:00
*** markvoelker has joined #openstack-infra12:01
*** sdake has joined #openstack-infra12:01
*** sdake has quit IRC12:02
*** panda|ruck is now known as panda|ruck|lunch12:02
*** jamesmcarthur has joined #openstack-infra12:02
*** jamesmcarthur has quit IRC12:08
*** yamamoto has joined #openstack-infra12:08
*** quiquell is now known as quiquell|lunch12:13
*** jamesmcarthur has joined #openstack-infra12:13
*** jamesmcarthur has quit IRC12:19
*** jamesmcarthur has joined #openstack-infra12:22
*** kjackal has joined #openstack-infra12:23
*** quiquell|lunch is now known as quiquell12:28
*** jpena is now known as jpena|lunch12:31
*** bhavikdbavishi has joined #openstack-infra12:33
*** markvoelker has quit IRC12:35
*** yamamoto has quit IRC12:37
*** yamamoto has joined #openstack-infra12:37
*** udesale has joined #openstack-infra12:42
*** jamesmcarthur has quit IRC12:43
*** electrofelix has quit IRC12:44
*** rh-jelabarre has joined #openstack-infra12:46
*** e0ne has quit IRC12:47
*** jamesmcarthur has joined #openstack-infra12:53
*** luizbag has joined #openstack-infra12:57
*** jamesmcarthur has quit IRC13:01
*** jamesmcarthur has joined #openstack-infra13:05
*** jistr is now known as jistr|mtg13:07
*** jistr|mtg is now known as jistr13:08
*** jamesmcarthur has quit IRC13:10
*** rlandy has joined #openstack-infra13:15
*** jamesmcarthur has joined #openstack-infra13:18
*** bhavikdbavishi has quit IRC13:22
*** panda|ruck|lunch is now known as panda|ruck13:26
*** jpena|lunch is now known as jpena13:28
*** jamesmcarthur has quit IRC13:29
*** markvoelker has joined #openstack-infra13:32
*** e0ne has joined #openstack-infra13:35
*** snapiri has joined #openstack-infra13:37
*** udesale has quit IRC13:37
*** udesale has joined #openstack-infra13:38
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: Add bionic nodeset for legacy job to switch to bionic  https://review.openstack.org/63901813:46
*** jamesmcarthur has joined #openstack-infra13:50
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: Migrating 'legacy-dsvm-base' from Xenial to Bionic  https://review.openstack.org/63909613:58
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: WIP: Migrating 'legacy-dsvm-base' from Xenial to Bionic  https://review.openstack.org/63909613:59
*** jcoufal has joined #openstack-infra14:01
*** fried_rice is now known as efried14:04
*** ykarel_ has joined #openstack-infra14:04
*** markvoelker has quit IRC14:05
*** dpawlik has quit IRC14:06
*** ykarel has quit IRC14:07
*** dave-mccowan has joined #openstack-infra14:07
*** jamesmcarthur has quit IRC14:08
*** owalsh_ has joined #openstack-infra14:08
*** owalsh has quit IRC14:09
openstackgerritGhanshyam Mann proposed openstack-infra/openstack-zuul-jobs master: WIP: Migrating 'legacy-dsvm-base' from Xenial to Bionic  https://review.openstack.org/63909614:19
*** owalsh has joined #openstack-infra14:19
*** owalsh_ has quit IRC14:20
*** jamesmcarthur has joined #openstack-infra14:25
*** zul has joined #openstack-infra14:32
*** kgiusti has joined #openstack-infra14:40
*** eharney has joined #openstack-infra14:40
*** jesusaur has quit IRC14:42
*** mriedem has joined #openstack-infra14:47
*** jesusaur has joined #openstack-infra14:47
*** ekultails has joined #openstack-infra14:51
*** ykarel_ is now known as ykarel|away14:54
*** bhavikdbavishi has joined #openstack-infra14:55
openstackgerritTobias Henkel proposed openstack-infra/zuul master: Fix rare semaphore leak during reconfiguration  https://review.openstack.org/63911814:57
*** udesale has quit IRC15:02
*** e0ne has quit IRC15:03
*** e0ne has joined #openstack-infra15:05
*** kjackal has quit IRC15:05
*** ykarel|away has quit IRC15:11
*** beekneemech is now known as bnemec15:21
*** bhavikdbavishi has quit IRC15:31
*** armax has joined #openstack-infra15:33
*** agopi has quit IRC15:40
openstackgerritLogan V proposed openstack/diskimage-builder master: Fix cloud-init element for Fedora  https://review.openstack.org/63913615:42
*** chandankumar is now known as raukadah15:51
*** kjackal has joined #openstack-infra15:52
openstackgerritMerged openstack-infra/zuul master: config: add playbooks to job.toDict()  https://review.openstack.org/62134315:52
*** yamamoto has quit IRC15:52
*** yamamoto has joined #openstack-infra15:54
*** yamamoto has quit IRC15:54
openstackgerritLogan V proposed openstack/diskimage-builder master: Allow specification of filesystem journal size  https://review.openstack.org/63336815:55
*** sreejithp has joined #openstack-infra15:57
*** bhavikdbavishi has joined #openstack-infra15:57
*** diablo_rojo has joined #openstack-infra15:58
clarkbmorning16:05
clarkbfrickler: I'll take a look at that as it was next on my list (along with finishing the kdc/admind flipover16:05
*** markvoelker has joined #openstack-infra16:05
*** jamesmcarthur_ has joined #openstack-infra16:06
clarkbinfra-root OOM Killer had killed our java logstash process on that worker01 node16:07
clarkbI've restarted it and the other services. My hunch is that we've got another very large/memory expensive log file sneaking it which triggers the OOMkiller16:07
*** jamesmcarthur has quit IRC16:08
fungihow did we track those down in the past?16:09
*** gfidente has quit IRC16:10
openstackgerritHervé Beraud proposed openstack-dev/pbr master: Resolve ``ValueError`` when mapping value contains a literal ``=``.  https://review.openstack.org/62537216:11
*** gfidente has joined #openstack-infra16:11
clarkbfungi: you can pull up the worker logfile where it stops and infer that one of the last handful of logfiles processed was the trigger16:11
clarkbfungi: then open those up in the log server and see which ones are in the multi hundred megabyte range16:11
clarkbI think I'm going to take this as an opportunity to reboot those servers16:11
clarkbmay as well16:12
clarkbinfra-root can you review https://review.openstack.org/#/c/638793/ which is my change that flips kadmind/kdcmaster to kdc03 from kdc01? The commit message also has a service flip over plan16:16
clarkbfungi: I usually go back through the logs after I've restarted thigns and try to dig out which log files are making it unhappy. I can walk others through that today if there is interest16:17
funginot sure if i have time today but that's probably enough detail i could work it out myself16:18
fungibasically just knowing that the worker logs are verbose enough you can find out what build is being processed at the time it dies16:19
fungifrom there it's presumably not hard to go digging in the archived artifacts for that build and see if any of the logs we want to index are massive?16:20
clarkbyup and then referring back to the log server for size data. It seems that anything over a hundred megabytes or so (uncompressed) gets us into danger territory16:20
*** yboaron_ has quit IRC16:20
clarkbthe logstash queue is almost 300k entries long. We've also seen the logstash server become unreliably slow when ti gets a very large queue like that. I'll watch it to see if its size decreases once all workers are back and if it doesn't we may need to restart it too16:23
fungigiven that zuul now limits the size of data a build can archive, i guess it's something which is compressing really well16:25
*** e0ne has quit IRC16:26
*** ginopc has joined #openstack-infra16:28
*** agopi has joined #openstack-infra16:28
clarkb295820 is the job queue number now. Checking again in an hour is probably a reasonable window to gauge if its rolling downhill or picking up after itself16:28
*** e0ne has joined #openstack-infra16:31
*** ginopc has quit IRC16:34
*** markvoelker has quit IRC16:34
clarkbhttp://logs.openstack.org/45/560445/242/check/tripleo-ci-centos-7-containerized-undercloud-upgrades/2b1385d/logs/undercloud/var/log/extra/errors.txt.gz?level=INFO is still wgetting for me but well over 200MB at this point and was being processed at the end of a worker log file16:37
clarkbhttp://logs.openstack.org/70/630970/4/check/tripleo-ci-centos-7-standalone-upgrade/62a4783/logs/undercloud/var/log/extra/errors.txt.gz?level=INFO as well but I've not had a chance to pull it and check uncompressed size yet16:37
clarkb(I figure one big download at a time is nicer for the logs server16:37
*** gyee has joined #openstack-infra16:37
clarkbwget says 402.37M for that first one16:39
*** takamatsu_ has quit IRC16:39
*** aojea has quit IRC16:39
clarkbzbr|out is apparently out. Any idea of who we should talk to about ^ mwhahaha EmilienM? basically errors log file is quite large in some instances and is suspected of OOMing our log processing nodes16:40
*** dklyle_ has quit IRC16:40
mwhahahalovely16:40
*** takamatsu_ has joined #openstack-infra16:41
*** yamamoto has joined #openstack-infra16:41
*** ginopc has joined #openstack-infra16:41
mwhahahais it just teh upgrades job?16:41
clarkbya looks like both containerized and standalone upgrade jobs based on the urls16:41
mwhahahaweshay -^16:42
clarkb279.41M on the second file16:43
clarkbprobably not an emergency but with feature freeze coming up it would be good to try and stabilize the log processing pipeline so that we can use it to find and track bugs more effectively16:44
mwhahahasure16:44
*** raukadah is now known as chandankumar16:44
*** helenafm has quit IRC16:44
mwhahahai'll file a bug to get visibility16:44
clarkbthank you16:44
*** takamatsu_ has quit IRC16:45
*** yamamoto has quit IRC16:46
mwhahahaBug 181760216:47
openstackbug 1817602 in tripleo "excessive errors in upgrade jobs causing logstash issues" [Critical,Triaged] https://launchpad.net/bugs/181760216:47
*** kjackal has quit IRC16:48
*** kopecmartin is now known as kopecmartin|off16:48
*** pgaxatte has quit IRC16:49
*** takamatsu_ has joined #openstack-infra16:51
fungiclarkb: should we stop indexing that errors.txt file temporarily?16:52
fungipresumably that's going to continue to crash the workers until fixed?16:52
clarkbfungi: ya if it isn't a one off issue that would be one way to address it. Another might be to take the head or tail of the file and store the remainder of the log in a file we don't index16:54
clarkbfungi: we can see if the workers OOM again16:55
fungiwas it only that worker which crashed?16:55
*** dklyle has joined #openstack-infra16:55
clarkbfungi: no 03 had as well and at that point I decided to just reboot all of them16:55
clarkbcan check the logs to see if more had crashed but I haven't looked yet16:55
*** ginopc has quit IRC16:59
*** ramishra has quit IRC17:01
*** kjackal has joined #openstack-infra17:03
*** mudpuppy has joined #openstack-infra17:06
*** takamatsu_ has quit IRC17:06
*** takamatsu_ has joined #openstack-infra17:07
*** spotz has joined #openstack-infra17:10
*** luizbag has quit IRC17:16
*** eharney has quit IRC17:17
*** e0ne has quit IRC17:18
*** jpich has quit IRC17:20
*** takamatsu_ has quit IRC17:21
*** takamatsu_ has joined #openstack-infra17:22
*** dtantsur is now known as dtantsur|afk17:23
*** takamatsu_ has quit IRC17:25
*** sdake has joined #openstack-infra17:26
*** takamatsu_ has joined #openstack-infra17:31
*** markvoelker has joined #openstack-infra17:32
*** chandankumar is now known as raukadah17:32
clarkb294446 is the logstash queue size now.17:40
clarkbI think I will go ahead and restart it to bring the queue size down so geard performs better17:40
clarkbmost of the backlog is from the weekend and with feature freeze happening in the near future I think we are more insterested in the newer data17:41
*** dpawlik has joined #openstack-infra17:43
clarkbinfra-root I'm ready to begin the steps planned at https://review.openstack.org/#/c/638793/ once I get a positive review or two indicating the plan looks good17:45
*** takamatsu_ has quit IRC17:46
clarkbfungi: smarcet: I'd also like to approve https://review.openstack.org/#/c/616002/ and get openstackid switched over to the future parser today17:47
clarkbif you can review that one I'd be happy to approve and watch it17:47
*** takamatsu_ has joined #openstack-infra17:48
*** dpawlik has quit IRC17:52
*** derekh has quit IRC18:01
*** trown is now known as trown|lunch18:04
*** takamatsu_ has quit IRC18:05
*** markvoelker has quit IRC18:05
*** sdake_ has joined #openstack-infra18:05
*** sdake has quit IRC18:07
*** sdake_ has quit IRC18:10
*** takamatsu_ has joined #openstack-infra18:10
*** sdake has joined #openstack-infra18:10
*** jpena is now known as jpena|off18:11
*** takamatsu_ has quit IRC18:14
*** Swami has joined #openstack-infra18:15
*** sdake has quit IRC18:16
*** sdake_ has joined #openstack-infra18:16
*** shardy has quit IRC18:18
*** takamatsu_ has joined #openstack-infra18:20
*** sdake_ has quit IRC18:20
*** sdake has joined #openstack-infra18:22
*** sdake has quit IRC18:26
*** kjackal has quit IRC18:26
*** raissa has joined #openstack-infra18:26
*** wolverineav has joined #openstack-infra18:27
*** sdake_ has joined #openstack-infra18:27
*** gfidente has quit IRC18:29
*** yamamoto has joined #openstack-infra18:29
*** gfidente has joined #openstack-infra18:29
weshaymwhahaha clarkb sagi and I are looking into it now.. thanks for the heads up18:30
*** yamamoto has quit IRC18:34
*** ijw has joined #openstack-infra18:35
*** wolverineav has quit IRC18:35
*** sdake_ has quit IRC18:35
*** sdake has joined #openstack-infra18:36
*** ijw has quit IRC18:36
*** ijw has joined #openstack-infra18:36
*** wolverineav has joined #openstack-infra18:37
*** bnemec has quit IRC18:40
clarkbfungi: thoughts on single core approving the kdc update?18:41
*** sdake has quit IRC18:41
*** sdake_ has joined #openstack-infra18:41
fungiclarkb: i'm happy to do it if you're ready for this step. you had it marked wip though18:41
mordredclarkb: +2 from me - go ahead whenever you want18:42
clarkbfungi: I had it marked WIP so that it wouldn't merge before I did the steps before merging in the commit message18:42
fungiright18:42
clarkbmordred: cool thanks. I'll start with the steps I listed there and approve when those are done18:42
fungisounds great!18:42
*** e0ne has joined #openstack-infra18:44
clarkbI've got kdc01 in the emergency file. I expect it will actually run pupept in a minute since it has been almost 45 minute since the last run18:44
clarkbonce that run is over I'll stop services and continue with the plan18:44
*** bnemec has joined #openstack-infra18:45
*** sdake_ has quit IRC18:45
*** sdake has joined #openstack-infra18:46
clarkbI've stopped krb5-admin-server and krb5-kdc services on kdc0118:49
clarkband commented out the run-kprop.sh cron entry on kdc0118:49
clarkbkprop is failing18:50
* clarkb debugs18:50
*** takamatsu_ has quit IRC18:50
*** sdake has quit IRC18:50
clarkbbeh needs more sudo18:50
clarkbok I actually have to leave the krb5-kdc service running on kdc01 to have kprop work. So I'm turning that service back on18:51
*** sdake has joined #openstack-infra18:51
clarkbI have approved the change that makes kdc03 the master18:52
fungiawesome18:55
*** sdake has quit IRC18:55
*** sdake has joined #openstack-infra18:56
*** takamatsu_ has joined #openstack-infra18:56
*** sdake has quit IRC19:01
*** sdake has joined #openstack-infra19:02
openstackgerritMelvin Hillsman proposed openstack-infra/irc-meetings master: Update UC Meeting time.  https://review.openstack.org/63917619:03
*** sdake has quit IRC19:05
*** sdake has joined #openstack-infra19:06
*** sdake has quit IRC19:11
*** sshnaidm is now known as sshnaidm|afk19:11
*** sdake has joined #openstack-infra19:14
*** yolanda has joined #openstack-infra19:15
*** sdake has quit IRC19:15
*** sdake_ has joined #openstack-infra19:15
*** eharney has joined #openstack-infra19:16
openstackgerritMerged openstack-infra/system-config master: Turn on the future parser for openstackid  https://review.openstack.org/61600219:17
*** trown|lunch is now known as trown19:19
*** sdake_ has quit IRC19:20
clarkbfungi: smarcet fyi there is a package install error on openstackid0119:20
fungilooking19:21
fungiupdate-alternatives: error: cannot stat file '/usr/bin/node': Too many levels of symbolic links19:22
fungithat's certainly weird19:22
openstackgerritMerged openstack-infra/system-config master: Make kdc03 the master kerberos kdc and admin server  https://review.openstack.org/63879319:23
fungi/usr/bin/node -> /usr/bin/nodejs19:23
fungi/usr/bin/nodejs -> /etc/alternatives/nodejs19:23
fungi/etc/alternatives/nodejs -> /usr/bin/node19:23
fungiwell that's just dandy19:23
clarkbfungi: I'm guessing puppet writes one of those symlinks and it conflicts with a symlink that the packaging writes?19:23
fungiyeah, likely19:24
fungithe nodejs package (installed from nodesource) seems to want to provide an executable at /usr/bin/node19:26
fungi2019-02-19 20:24:36 status installed nodejs:amd64 10.15.1-1nodesource119:26
fungithat's from the dpkg log19:27
fungibasically when the server was built19:27
fungiso i don't think an upgrade caused this19:27
mordredfungi: is our puppet trying to make the symlink?19:29
fungii'm not sure yet19:29
mordrednod19:29
fungii've just done a `sudo apt install --reinstall nodejs` which seems to have replaced the symlink at /usr/bin/node with an executable binary again19:30
*** luizbag has joined #openstack-infra19:31
fungion openstackid-dev01 we have /usr/bin/node -> /usr/bin/nodejs but /usr/bin/nodejs is an executable binary provided by the nodejs package from ubuntu xenial19:32
fungiand on -dev01 there's a /usr/local/bin/node which seems to have been installed with npm instead. there is no /usr/local/bin/node on openstackid0119:33
fungiboth servers seem to have a /etc/apt/sources.list.d/nodesource.list present19:34
clarkbnext puppet run in about 40 minuets should do the kdc swapo19:39
*** kjackal has joined #openstack-infra19:50
openstackgerritMelvin Hillsman proposed openstack-infra/irc-meetings master: Update UC Meeting time.  https://review.openstack.org/63917619:54
*** raissa has quit IRC19:58
*** jesusaur has quit IRC19:59
*** yamamoto has joined #openstack-infra20:00
*** jesusaur has joined #openstack-infra20:02
*** markvoelker has joined #openstack-infra20:02
openstackgerritIvoline Ngong proposed openstack-infra/storyboard master: updated_at field in projects now contains a date that signifies the most recent date a task or story related to the project was last updated/created. Task: 24368  https://review.openstack.org/63884020:02
*** yamamoto has quit IRC20:04
clarkbfungi: Feb 25 19:31:07 openstackid01 puppet-user[1263]: (/Stage[main]/Nodejs::Install/File[/usr/bin/node]/ensure) ensure changed 'file' to 'link'20:14
fungiyep, that seems to be the cause20:14
clarkbI expect puppet to run on kdc03 and make it master kerberos node in just a minute or two20:14
openstackgerritAmy Marrich (spotz) proposed openstack-infra/irc-meetings master: Update UC Meeting time.  https://review.openstack.org/63917620:15
clarkbinfra-root http://paste.openstack.org/show/746073/ that seems to have gone as expected20:16
clarkbNext in my list is to udpate dns then confirm that kadmin tasks work as expected. Anyone have ideas for how to do that effectively? mordred ?20:17
clarkbthe testing part, not the dns part20:17
clarkbfungi: openstackid puppet application looks good to me20:22
corvusclarkb: create and delete a principal?20:25
clarkbcorvus: oh right that will go into the db. Ya I'll createa clarkb-test principal and delete it20:26
*** bhavikdbavishi has quit IRC20:31
*** dosaboy has quit IRC20:34
*** dosaboy has joined #openstack-infra20:36
*** markvoelker has quit IRC20:36
*** dosaboy has quit IRC20:37
*** wolverineav has quit IRC20:37
*** wolverineav has joined #openstack-infra20:37
*** jtomasek has quit IRC20:39
*** ccamacho has quit IRC20:39
*** wolverineav has quit IRC20:39
clarkbdns records should all be updated20:40
*** jtomasek has joined #openstack-infra20:41
*** jtomasek has quit IRC20:42
clarkbnew names all resolve for me20:42
*** jtomasek has joined #openstack-infra20:43
*** dosaboy has joined #openstack-infra20:46
clarkbnow if only I understood the error messages kadmin is giving me on my desktop20:48
clarkbok you have to configure krb5.conf with a real and admin server, it doesn't seem to look that up in dns20:53
openstackgerritIvoline Ngong proposed openstack-infra/storyboard master: Updated_at content modified  https://review.openstack.org/63884020:56
clarkbinfra-root I am able to create and delete a test principal20:56
clarkbI'm going to turn off krb5-kdc on kdc01 now since it isn't getting replicated to.20:58
clarkbThis is the point in time which I would expect any problems if we are going to have them20:58
*** agopi has quit IRC20:58
corvusclarkb: ack.  i can stand by to authententicate from my workstation to verify correct operation after you do so.20:58
clarkbkdc01 is no longer running a krb5-kdc. Going to try a local kinit now20:59
*** jrist has quit IRC20:59
*** agopi has joined #openstack-infra20:59
corvuskinit: Cannot contact any KDC for realm 'OPENSTACK.ORG' while getting initial credentials20:59
*** weshay has quit IRC20:59
*** weshay has joined #openstack-infra21:00
clarkbhrm it worked for me from here but I also edit /etc/krb5.conf for kadmin21:00
*** wolverineav has joined #openstack-infra21:00
corvusoh, i have a local krb5.conf, sorry.21:01
corvusmy test is invalid.21:01
*** lucasagomes has quit IRC21:01
clarkbok21:01
corvuswe should probably not be changing the numbers all the time :)21:01
clarkbfwiw I set it to use kdc.openstack.org21:01
clarkbwhcih is a cname to the master (that I updated when I updated dns)21:01
corvusok.  wfm now.21:02
corvusi removed openstack.org completely from my krb5.conf file21:02
corvus(so i'm using only dns)21:02
clarkbgreat21:02
*** jrist has joined #openstack-infra21:03
clarkbfor whatever reason kadmin did not like that locally21:03
clarkbit complained about missing config items in the file21:03
corvusyeah, kadmin may require it21:03
corvusthat may be a good reason to consider keeping the hostnames stable21:04
clarkbwe can use kdc.openstack.org or similar? then cname to the actual master node?21:04
clarkbwe don't do that in the SRV records21:04
corvusclarkb: it's the non kadmin case i'm worried about21:04
clarkbah ok21:04
clarkb_kerberos._udp.openstack.org SRV records then21:05
corvusi'm sure there's a solution, but i don't know what it is21:05
clarkbin any case this seems to be working. I'll keep my eyes and ears open for afs unhappyness21:05
corvusall i can say is that we named kdc01 and kdc02 before we established our hostname policy; i don't think we expected them to change21:05
clarkband if this is happy after a day or two we should be able to delete the kdc01 server21:06
clarkbcorvus: gotcha21:06
clarkbfor extra safety I've removed kdc03 and kdc04 from kdc01's kprop.sh script21:06
clarkbso even if it tries to propogate it should talk to no downstream servers21:06
*** agopi_ has joined #openstack-infra21:07
clarkb#status log kdc03 is now our kerberos master/admin server. kdc01 is not yet deleted but is not running any services or the propogation cron. Will cleanup kdc01 after a day or two of happy afs services.21:07
openstackstatusclarkb: finished logging21:07
*** jrist has quit IRC21:09
*** jpena|off has quit IRC21:09
*** otherwiseguy has quit IRC21:09
*** pabelanger has quit IRC21:09
*** jtomasek has quit IRC21:09
*** jpena|off has joined #openstack-infra21:10
*** agopi has quit IRC21:10
*** kashyap has quit IRC21:10
*** jrist has joined #openstack-infra21:10
*** otherwiseguy has joined #openstack-infra21:11
*** agopi__ has joined #openstack-infra21:13
openstackgerritsebastian marcet proposed openstack-infra/system-config master: Updated openstackid prod node  https://review.openstack.org/63919021:14
openstackgerritJames E. Blair proposed openstack-infra/system-config master: Run zuul-preview  https://review.openstack.org/63765421:15
corvusclarkb, fungi, mordred: ^ that patchset removes the speculative docker stuff, so the run-zuul-preview job is just like the rest of the run-base jobs for now.21:15
corvusthat should let us start up the service, and we can swing back to speculative docker images after making changes to zuul+nodepool21:15
clarkblooking21:16
*** agopi_ has quit IRC21:16
*** agopi__ is now known as agopi21:16
*** jcoufal has quit IRC21:16
clarkbcorvus: change lgtm. Is that something we might consider running on zuul01 instead of a new host?21:19
clarkbI guess zuul01 often has its memory spoken for so more services might not be a good idea?21:19
corvusclarkb: it's something we could colocate with other services (would be a great thing to throw into a k8s cluster), but not something i'd want to put on zuul01 since it's a spof.21:20
corvuswe could probably spin it up as a 2G host21:21
*** e0ne has quit IRC21:21
clarkbre k8s maybe we ought to take an inventory of things that would work in a k8s then we can have a todo list peopel can work on to k8sify them into our k8s cluster (though maybe we need to finish the story on k8s deployments first?)21:22
corvusclarkb: ++ i think we have a lot21:23
clarkbok gonna pop out for lunch now. Back in a bit21:24
*** sdake has joined #openstack-infra21:27
openstackgerritIan Wienand proposed openstack-infra/nodepool master: [dnm] testing rhel8 images  https://review.openstack.org/63901321:28
*** kgiusti has left #openstack-infra21:32
*** markvoelker has joined #openstack-infra21:33
*** luizbag has quit IRC21:34
openstackgerritMerged openstack-infra/system-config master: Turn on the future parser for refstack  https://review.openstack.org/62815321:35
*** wolverineav has quit IRC21:42
*** wolverineav has joined #openstack-infra21:42
*** rcernin has joined #openstack-infra21:46
*** whoami-rajat has quit IRC21:47
*** yamamoto has joined #openstack-infra21:48
*** sdake has quit IRC21:48
*** yamamoto has quit IRC21:52
*** e0ne has joined #openstack-infra21:54
mordredclarkb, corvus: I agree - I think we have a good amount of thigns we can k8s-ify - but also we should finish that story before we set people off working21:54
*** e0ne has quit IRC21:55
*** sdake has joined #openstack-infra21:59
*** trown is now known as trown|outtypewww22:00
*** agopi has quit IRC22:00
*** sdake has quit IRC22:01
*** sdake has joined #openstack-infra22:03
*** markvoelker has quit IRC22:04
*** e0ne has joined #openstack-infra22:05
*** sdake has quit IRC22:05
*** kjackal has quit IRC22:07
*** sdake has joined #openstack-infra22:07
*** e0ne has quit IRC22:08
*** rkukura_ has joined #openstack-infra22:08
*** sdake has quit IRC22:10
*** rkukura has quit IRC22:10
*** rkukura_ is now known as rkukura22:10
*** zerick has quit IRC22:11
*** zerick has joined #openstack-infra22:11
*** wolverineav has quit IRC22:12
*** wolverineav has joined #openstack-infra22:13
*** sdake has joined #openstack-infra22:13
*** sdake has quit IRC22:13
openstackgerritIvoline Ngong proposed openstack-infra/storyboard master: Updated_at content modified  https://review.openstack.org/63884022:17
openstackgerritMerged openstack-infra/system-config master: Run zuul-preview  https://review.openstack.org/63765422:18
*** agopi has joined #openstack-infra22:19
*** sshnaidm|afk has quit IRC22:24
clarkbok the refstack futureparsering resulted in a different apache config. Apache is still running so it didn't result in a broken config. I'm now trying to find where puppet stores those diffs22:35
clarkbold file had ServerAdmin undef in it22:36
clarkbso I think the old side was broken? new side doesn't have any ServerAdmin lines. Looking at what the intention is there22:37
*** sshnaidm has joined #openstack-infra22:39
openstackgerritMerged openstack-dev/pbr master: Resolve ``ValueError`` when mapping value contains a literal ``=``.  https://review.openstack.org/62537222:43
clarkbok current code is doing the right thing. We don't set a server admin value22:44
mordredcool22:44
clarkbcmurphy: I think that means we've done all of the futureparser conversions?22:45
clarkband now we can continue to do puppet4 upgrades22:46
clarkbthough I'm probably going to pick off another trusty host to upgrade before I look at that22:46
cmurphyclarkb: ask is the last one22:51
clarkbah22:51
clarkbcorvus: mordred: I'm looking at what is required to upgrade the afs volume and db servers. DB servers look simpler so maybe I'll start there. If I make a new db server what is the process for joining it to the group so that it can be synced to and old server(s) deleted?22:52
mordredclarkb: I'm going to have to defer to corvus on that one22:56
*** tkajinam has joined #openstack-infra22:57
*** markvoelker has joined #openstack-infra23:01
clarkbhttps://lists.openafs.org/pipermail/openafs-info/2013-February/039264.html is not instilling much confidence23:01
clarkbFirst of all we apparently shouldn't mix db versions23:02
clarkband second IP addrs matter23:02
clarkb:/23:02
corvusi would seriously consider apt-get dist-upgrade23:03
clarkbya that may be easiest. We'd still need a full shutdown/outage of the cluster sounds like but an inplace upgrade would address the IP addr situation23:04
corvusi've never performed a complete replacement and don't know off the top of my head what's involved.23:04
clarkbsolaris 8 to rhel 6 though, if they can make that jump we can do trusty to xenial right? :)23:05
clarkbcorvus: do you expect that would be easiest for the volume servers too?23:06
clarkbI might page this out and try to pick off more of the easier options first. health.o.o I think you are the next lucky contestant23:07
corvusclarkb: for giant volumes, probably so.  if we could move volumes between servers quickly, i would probably just do it entirely at the client level.23:10
openstackgerritClark Boylan proposed openstack-infra/system-config master: Set health service's vhost hostname explicitly  https://review.openstack.org/63921723:12
clarkbcorvus: I was thinking that maybe we'd be able to move the cinder volumes but I'm not sure what reenrolling into a new afs server looks like when you do that23:12
clarkbinfra-root https://review.openstack.org/639217 is a step zero for spinning up a new health server. If we can get that in. I'll boot a new instance and sned a followup change that adds things to inventory23:13
*** pabelanger has joined #openstack-infra23:14
*** jamesmcarthur_ has quit IRC23:17
*** jamesmcarthur has joined #openstack-infra23:19
openstackgerritIan Wienand proposed openstack/diskimage-builder master: [wip] shortcut pip-and-virtualenv for later redhat distros  https://review.openstack.org/63922023:19
openstackgerritIan Wienand proposed openstack-infra/nodepool master: [dnm] testing rhel8 images  https://review.openstack.org/63901323:20
ianwcgoncalves /dmsimard: re prior discussions ^ ... i'm wondering if we just shortcut out all pip-and-virtualenv for later distros and use the inbuilt packages and assume they get it right23:21
ianwthe only thing is linking /usr/bin/pip2 & /usr/bin/virtualenv-2 back to "pip" and "virtualenv" because a bunch of stuff assumes that23:22
ianwmost python3 stuff explicitly calls "pip3" ... and virtualenv python3 is just a mess, so maybe that's all bases covered23:22
ianwthe only certainty is it will break *something*23:23
*** jamesmcarthur has quit IRC23:30
*** hwoarang has quit IRC23:32
*** hwoarang has joined #openstack-infra23:33
*** markvoelker has quit IRC23:34
*** jamesmcarthur has joined #openstack-infra23:36
*** yamamoto has joined #openstack-infra23:36
fungiianw: ideally we would just stop polluting our systems with preinstalled pip and virtualenv and instead require jobs which need those to install them23:40
*** sreejithp has quit IRC23:40
fungilast i heard most of our tox-using jobs try to, but no-op because it's already there23:41
clarkbwe still use it for the zuul-cloner shim install iirc23:41
clarkbbut could remove it after bootstrapping like that I usppose23:41
*** yamamoto has quit IRC23:41
fungiyeah, that was the last hold-out i was aware of, but we _could_ still install zuul-cloner without putting pip and virtualenv on the images23:41
ianwfungi: yes ... i think that falls under "only certainty is it will break something" :)  it would be a firefighting period, but maybe one we should accept23:42
ianwi'd also have to re-audit if the distro versions have fixed all the pip bugs we started installing from source to fix too23:43
clarkbfungi: well you need a virtualenv to store the zuul-cloner deps23:43
clarkbso it has to get there somehow23:44
*** gfidente has quit IRC23:44
ianwyeah, i think having just the system packages installed would be a good simplification23:45
fungiclarkb: right but we can avoid installing virtualenv itself in the executable path (and clean it up after, or even use it from outside the chroot when putting the zuul-cloner virtualenv on the image)23:46
clarkbya23:46
ianwnodepool-base is also setting up an os-testr virtualenv23:46
*** jamesmcarthur has quit IRC23:47
ianwand bindep for the infra-package-needs23:47
fungier, actually the lack of support for moving virtualenv paths probably means we'd have to do it inside the chroot, but still wouldn't need to install virtualenv into the default execution path23:47
fungiianw: i *think* the bindep role also tries to install bindep if it doesn't exist23:48
fungibut regardless, the same solution for all three could be used, or better still the jobs which need those can make sure to install them23:48
ianwfungi: well the build-essential the idea is to pre-install the packages to save time in the gate, i think that's valuable although i see the argument of moving it all into jobs23:49
funginot saying i expect we'll do any of that any time soon, but it's a good goal to keep in mind as we work through pip and virtualenv related stuff on our images23:49
fungiproblem with anything we preinstall, *especially* if we preinstall it with a package manager other than the distro's, is that there will be jobs which don't want whatever it is we're preinstalling and cleanly uninstalling that stuff is even harder23:50
dmsimardianw: I was wondering if we should test with vanilla cloud images, we have quite a delta and it was frustrating (as an end user) that an issue wasn't reproduceable in "production" using the cloud images.23:51
clarkbdmsimard: we explicitly don't want vanilla cloud images though23:51
clarkbdmsimard: they change often and break and are generally unuseable23:51
dmsimardFor caching ?23:51
clarkbdmsimard: for reliability23:51
clarkbone day cloud init updates and nothing works23:51
dmsimardWe can gate them23:51
fungivanilla cloud images similarly preinstall lots of stuff we may not want23:51
dmsimardfungi: true23:52
ianwdmsimard / clarkb: yeah ... although a *lot* has changed since the snapshot days23:52
clarkblike when hpcloud had cloud init set up to do weird things with the ephemeral disk23:52
clarkball of a sudden nothing worked becuse this disk was over here now because your clodu image knows better23:52
fungifor example, and i don't know whether this is still the case, but for the longest time rhel shipped with quite a lot of python libraries installed as required deps of their system tools23:52
clarkbdmsimard: fwiw we do publish our images and provide the means for you to build them yourself23:53
ianwfungi: yep .. but e.g. rhel8 now has this idea of a "system" python and then user python is a different thing23:53
fungiand this broke our ability to test projects with newer versions of those python modules, especially if they also needed to interact with python modules that had to be installed outside a venv23:53
clarkbdmsimard: so in theory its not really much different than using upstream cloud images. You just have to download them from somewhere else23:53
*** diablo_rojo has quit IRC23:53
ianwclarkb: but i think, in practice, things would be much more stable today given the overall trend of minimising those images, their much wider use23:54
clarkbianw: that is possible23:54
clarkbianw: I'd still grump about the username choices though23:54
ianwclarkb: the cloud provider images we were using ~4/5 years ago, yes they managed to change in weird and wonderful ways all the time23:54
clarkb(seriously we don't need every distro to use a different username )23:54
ianwbut yeah, a lot of things built ontop of our customisations.  i never really defend dib ... it has a lot of issues and they're getting worse (e.g. use of yum/zypper on ubuntu hosts is fragile)23:56
fungii'd prefer if they all used the one we already have: root23:56
fungibut that seems to send clueless security auditors into a panic23:56
clarkbdmsimard: out of curiousity do you know what the difference was that caused problems for you? it is entirely possible we'd still need that delta if we built on top of the vanilla images23:56
clarkblike maybe it was something to handle rax networking23:56
clarkbwhich does not work with the vanilla images23:57
clarkb(as an example)23:57
fungisomehow having a standard username with root privileges on all your images is so much more secure than having a standard username which *is* root on all your images23:57
clarkbianw: dib also does a lot of things right though. Like building without needing a virtualization layer (because nested virt still hard to find) and local caching of intermedaite artifacts23:58
clarkbianw: finding image build tools that do both of those things outside of dib is basically impossible23:58
clarkb(granted that is also some of the source of the yum/zypper woes)23:58
fungispeaking of building without needing virtualization, i found mmdebstrap over the weekend. it's quite a lot faster than debootstrap and can work as a non-root user with fakechroot, even do cross-architecture filesystem builds23:59
ianwyeah, and one tool that produces ubuntu/debian/fedora/centos/rhel/gentoo/*suse on a daily basis :)23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!