Thursday, 2019-06-13

openstackgerritTristan Cacqueray proposed zuul/nodepool master: static: enable using a single host with different user or port  https://review.opendev.org/65920900:01
*** paladox has quit IRC00:02
*** paladox has joined #openstack-infra00:02
*** paladox has quit IRC00:02
*** paladox has joined #openstack-infra00:02
*** jamesmcarthur has joined #openstack-infra00:07
*** paladox has quit IRC00:08
*** paladox has joined #openstack-infra00:08
*** markvoelker has quit IRC00:09
openstackgerritMerged openstack/project-config master: Revert "Revert "opendev.org mirrors: switch out DFW, switch in IAD""  https://review.opendev.org/66503700:09
*** paladox has quit IRC00:09
*** weifan has joined #openstack-infra00:09
*** paladox has joined #openstack-infra00:10
*** weifan has quit IRC00:15
*** weifan has joined #openstack-infra00:21
*** goldyfruit has quit IRC00:24
*** goldyfruit has joined #openstack-infra00:24
*** weifan has quit IRC00:27
*** hwoarang has quit IRC00:30
*** liuyulong has quit IRC00:31
*** weifan has joined #openstack-infra00:32
*** weifan has quit IRC00:35
*** lseki has joined #openstack-infra00:38
*** yamamoto has quit IRC00:48
*** jamesmcarthur has quit IRC00:49
*** jamesmcarthur has joined #openstack-infra00:50
*** olaph has joined #openstack-infra00:53
ianwok, access starting to happen from ^00:55
*** jamesmcarthur has quit IRC00:55
*** rf0lc0 has joined #openstack-infra00:57
*** mattw4 has quit IRC01:05
*** markvoelker has joined #openstack-infra01:05
ianwone difference here is that cachefilesd isn't running atm actually01:06
ianwi'll let it run like this for a hour, say, and then enabled cachefiles module/dameon01:07
*** dychen has joined #openstack-infra01:09
*** dchen has quit IRC01:12
*** rfarr__ has quit IRC01:13
*** lifeless has joined #openstack-infra01:14
*** _erlon_ has quit IRC01:17
*** jamesmcarthur has joined #openstack-infra01:20
*** weifan has joined #openstack-infra01:20
*** weifan has quit IRC01:25
*** happyhemant has quit IRC01:28
*** dingyichen has joined #openstack-infra01:31
*** dychen has quit IRC01:34
*** smarcet has joined #openstack-infra01:36
*** michael-beaver has joined #openstack-infra01:38
*** markvoelker has quit IRC01:39
*** ykarel|away has joined #openstack-infra01:54
*** ykarel|away is now known as ykarel02:04
*** rlandy|ruck|bbl is now known as rlandy|ruck02:06
*** dayou_ has quit IRC02:08
*** gyee has quit IRC02:11
cloudnullanyone around able to give https://review.opendev.org/#/c/664932 a review?02:11
*** rf0lc0 has quit IRC02:13
*** whoami-rajat has joined #openstack-infra02:14
*** jamesmcarthur has quit IRC02:15
*** jamesmcarthur has joined #openstack-infra02:15
*** jamesmcarthur has quit IRC02:18
*** ykarel is now known as ykarel|afk02:19
*** jamesmcarthur has joined #openstack-infra02:20
ianwok, cachefilesd module loaded and enabled (somehow it didn't start withotu commenting out the selinux check ... it does start in CI and when i tried it before; must be something to do with restarting when there's already a cache i'd say)02:21
*** dayou_ has joined #openstack-infra02:22
ianwfor reference, the cache was at about 500m before restart; in case we see issues in a similar place02:23
*** gregoryo has joined #openstack-infra02:25
*** diablo_rojo has quit IRC02:27
*** rlandy|ruck has quit IRC02:32
*** jamesmcarthur has quit IRC02:33
*** jamesmcarthur has joined #openstack-infra02:33
*** markvoelker has joined #openstack-infra02:36
*** auristor has quit IRC02:38
*** lifeless has quit IRC02:38
cloudnullthanks ianw!02:43
*** lifeless has joined #openstack-infra02:44
*** weifan has joined #openstack-infra02:45
*** weifan has quit IRC02:48
*** bhavikdbavishi has joined #openstack-infra02:48
*** weifan has joined #openstack-infra02:48
*** weifan has quit IRC02:49
openstackgerritMerged zuul/zuul master: Update quickstart nodepool node to python3  https://review.opendev.org/65848602:52
*** bhavikdbavishi has quit IRC02:53
*** auristor has joined #openstack-infra02:54
*** jamesmcarthur has quit IRC03:01
*** jamesmcarthur has joined #openstack-infra03:02
*** rascasoft has quit IRC03:03
*** bhavikdbavishi has joined #openstack-infra03:03
*** jamesmcarthur has quit IRC03:04
*** jamesmcarthur has joined #openstack-infra03:04
*** lseki has quit IRC03:06
*** rascasoft has joined #openstack-infra03:06
*** markvoelker has quit IRC03:09
openstackgerritPaul Belanger proposed zuul/zuul master: Add more test coverage on using python-path  https://review.opendev.org/65981203:31
*** smarcet has quit IRC03:32
*** jamesmcarthur has quit IRC03:43
*** ramishra has joined #openstack-infra03:43
*** jamesmcarthur has joined #openstack-infra03:43
*** michael-beaver has quit IRC03:48
*** ricolin has joined #openstack-infra03:50
*** weifan has joined #openstack-infra03:53
*** dave-mccowan has quit IRC03:54
*** weifan has quit IRC03:57
*** jamesmcarthur has quit IRC03:58
*** ykarel|afk is now known as ykarel04:00
*** ramishra has quit IRC04:02
*** ramishra has joined #openstack-infra04:03
*** yamamoto has joined #openstack-infra04:05
*** kaisers has quit IRC04:06
*** markvoelker has joined #openstack-infra04:06
*** igordc has joined #openstack-infra04:07
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505704:13
*** bhavikdbavishi has quit IRC04:19
*** bhavikdbavishi has joined #openstack-infra04:20
*** kaisers has joined #openstack-infra04:21
*** whoami-rajat has quit IRC04:23
*** kjackal has joined #openstack-infra04:26
*** markvoelker has quit IRC04:40
*** udesale has joined #openstack-infra04:41
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505704:42
openstackgerritMerged openstack/project-config master: Retire independent ansible role  https://review.opendev.org/66493204:49
*** weifan has joined #openstack-infra04:51
*** weifan has quit IRC04:51
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505704:51
*** janki has joined #openstack-infra04:52
*** pcaruana|afk| has joined #openstack-infra05:01
*** pcaruana|afk| has quit IRC05:04
*** pcaruana has joined #openstack-infra05:04
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505705:12
*** cmurphy is now known as cmurphy_afk05:14
*** e0ne has joined #openstack-infra05:21
*** ricolin has quit IRC05:36
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505705:36
*** markvoelker has joined #openstack-infra05:37
*** takamatsu has joined #openstack-infra05:42
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505705:58
*** kopecmartin|off is now known as kopecmartin06:01
*** spsurya has joined #openstack-infra06:08
*** markvoelker has quit IRC06:10
*** zbr|flow is now known as zbr|ooo06:11
*** zhurong has quit IRC06:14
openstackgerritIan Wienand proposed opendev/system-config master: [wip] kernel update for mirrors  https://review.opendev.org/66505706:15
*** dingyichen has quit IRC06:17
*** ykarel_ has joined #openstack-infra06:19
*** zhurong has joined #openstack-infra06:20
*** dchen has joined #openstack-infra06:21
*** ykarel has quit IRC06:21
*** e0ne has quit IRC06:24
*** kjackal has quit IRC06:30
*** iurygregory has joined #openstack-infra06:44
*** pgaxatte has joined #openstack-infra06:49
*** xek_ has joined #openstack-infra06:53
yoctozeptohttps://opendev.org/zuul/zuul/search?q=tox-docs gitea search is lame :/06:56
*** ykarel_ is now known as ykarel06:57
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213407:00
*** rpittau|afk is now known as rpittau07:00
*** ianychoi has joined #openstack-infra07:02
*** ginopc has joined #openstack-infra07:04
*** markvoelker has joined #openstack-infra07:08
*** dtantsur|afk is now known as dtantsur07:10
*** slaweq has joined #openstack-infra07:12
*** tosky has joined #openstack-infra07:13
*** markvoelker has quit IRC07:13
*** igordc has quit IRC07:15
*** ccamacho has quit IRC07:15
*** jbadiapa has quit IRC07:17
openstackgerritDirk Mueller proposed openstack/diskimage-builder master: Update test coverage for openSUSE/-minimal to 15.1  https://review.opendev.org/66013707:20
*** tesseract has joined #openstack-infra07:21
*** trident has quit IRC07:31
*** takamatsu has quit IRC07:32
*** trident has joined #openstack-infra07:34
*** ykarel is now known as ykarel|lunch07:34
*** kjackal has joined #openstack-infra07:37
*** rascasoft has quit IRC07:42
*** rascasoft has joined #openstack-infra07:43
*** jpena|off is now known as jpena07:43
*** pkopec has joined #openstack-infra07:51
*** pkopec has quit IRC07:53
*** pkopec has joined #openstack-infra07:53
*** markvoelker has joined #openstack-infra08:10
*** whoami-rajat has joined #openstack-infra08:10
*** ykarel|lunch is now known as ykarel08:14
*** markvoelker has quit IRC08:14
*** lucasagomes has joined #openstack-infra08:14
*** ralonsoh has joined #openstack-infra08:15
*** takamatsu has joined #openstack-infra08:19
*** gregoryo has quit IRC08:23
*** rcernin has quit IRC08:23
ianwcorvus / clarkb: updated few notes on -> https://etherpad.openstack.org/p/opendev-mirror-afs08:24
*** jpich has joined #openstack-infra08:24
ianwin short, IAD seems to be running fine with 5.1.9 kernel+kafs+cachefilesd ok ... cpu load is low, /var/cache/openafs (yes, using old path) is slowly increasing, requests appear to be moving through08:25
ianwi have started looking at installing the mainline kernels in -> https://review.opendev.org/#/c/665057/ ... if you want to investigate why the rebooted nodes seem to fail to start ntpd feel free :)08:25
ianwand i have also built openafs 1.8.3 bionic packages @ https://launchpad.net/~openstack-ci-core/+archive/ubuntu/openafs ... but i'd say if the kafs thing is working out, this is currently our backup plan08:26
*** ccamacho has joined #openstack-infra08:27
*** priteau has joined #openstack-infra08:28
*** jaosorior has joined #openstack-infra08:29
*** ociuhandu has joined #openstack-infra08:31
*** ccamacho has quit IRC08:32
*** ccamacho has joined #openstack-infra08:33
*** ociuhandu has quit IRC08:36
*** yboaron_ has joined #openstack-infra08:37
openstackgerritMatthieu Huin proposed zuul/zuul master: web: add tenant and project scoped, JWT-protected actions  https://review.opendev.org/57690708:38
*** imacdonn has quit IRC08:38
*** imacdonn has joined #openstack-infra08:39
*** dpawlik has joined #openstack-infra08:40
*** ociuhandu has joined #openstack-infra08:42
*** tkajinam has quit IRC08:51
*** ykarel is now known as ykarel|afk08:53
*** ykarel|afk has quit IRC09:00
*** gfidente has joined #openstack-infra09:08
*** markvoelker has joined #openstack-infra09:10
*** ykarel|afk has joined #openstack-infra09:13
*** ykarel|afk is now known as ykarel09:13
*** markvoelker has quit IRC09:15
openstackgerritMatthieu Huin proposed zuul/zuul master: Allow operator to generate auth tokens through the CLI  https://review.opendev.org/63619709:20
*** e0ne has joined #openstack-infra09:26
openstackgerritMatthieu Huin proposed zuul/zuul master: Zuul CLI: allow access via REST  https://review.opendev.org/63631509:31
*** derekh has joined #openstack-infra09:31
*** gmann has quit IRC09:33
*** kjackal has quit IRC09:40
*** kjackal has joined #openstack-infra09:40
*** slaweq has quit IRC09:45
*** slaweq has joined #openstack-infra09:46
*** Lucas_Gray has joined #openstack-infra09:52
*** udesale has quit IRC09:59
*** udesale has joined #openstack-infra09:59
*** yamamoto has quit IRC10:09
*** jbadiapa has joined #openstack-infra10:11
*** markvoelker has joined #openstack-infra10:11
*** ykarel is now known as ykarel|afk10:14
*** markvoelker has quit IRC10:15
*** Adri2000 has quit IRC10:20
*** kjackal has quit IRC10:28
*** gfidente has quit IRC10:40
*** sthussey has quit IRC10:40
*** bhavikdbavishi has quit IRC10:43
*** yamamoto has joined #openstack-infra10:45
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213410:49
*** ykarel|afk is now known as ykarel10:49
*** whoami-rajat has quit IRC10:50
*** priteau has quit IRC10:54
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213410:58
*** jpich has quit IRC10:59
*** yamamoto has quit IRC10:59
*** yamamoto has joined #openstack-infra10:59
*** jpich has joined #openstack-infra10:59
*** jpena is now known as jpena|lunch11:01
*** kjackal has joined #openstack-infra11:02
*** _erlon_ has joined #openstack-infra11:05
*** gmann has joined #openstack-infra11:09
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213411:20
*** nicolasbock has joined #openstack-infra11:21
*** yamamoto has quit IRC11:24
*** yamamoto has joined #openstack-infra11:28
*** yamamoto has quit IRC11:40
*** yamamoto has joined #openstack-infra11:43
*** yamamoto has quit IRC11:43
*** yamamoto has joined #openstack-infra11:43
*** jtomasek_ has quit IRC11:45
*** jtomasek has joined #openstack-infra11:46
*** jtomasek has quit IRC11:47
*** jtomasek has joined #openstack-infra11:47
*** yamamoto has quit IRC11:48
*** sshnaidm has quit IRC11:52
*** yamamoto has joined #openstack-infra11:53
*** bobh has joined #openstack-infra11:54
*** rh-jelabarre has joined #openstack-infra11:56
*** sshnaidm has joined #openstack-infra11:56
*** yamamoto has quit IRC11:57
*** bhavikdbavishi has joined #openstack-infra12:03
*** rlandy has joined #openstack-infra12:05
*** rlandy is now known as rlandy|ruck12:06
*** rf0lc0 has joined #openstack-infra12:07
*** bhavikdbavishi has quit IRC12:08
*** gfidente has joined #openstack-infra12:10
*** markvoelker has joined #openstack-infra12:13
*** Adri2000 has joined #openstack-infra12:13
*** bhavikdbavishi has joined #openstack-infra12:15
*** markvoelker has quit IRC12:17
*** spsurya has quit IRC12:18
*** yamamoto has joined #openstack-infra12:21
*** goldyfruit has quit IRC12:24
auristorianw: if you are having issues with kafs please reach out to dhowells in the #openafs channel12:25
*** janki has quit IRC12:26
*** pkopec has quit IRC12:36
*** pkopec has joined #openstack-infra12:37
*** jpena|lunch is now known as jpena12:40
*** yamamoto has quit IRC12:40
*** aaronsheffield has joined #openstack-infra12:56
*** apetrich has quit IRC12:56
*** apetrich has joined #openstack-infra12:57
*** ekultails has joined #openstack-infra12:58
*** yamamoto has joined #openstack-infra12:59
*** pcaruana has quit IRC13:01
*** chandankumar is now known as raukadah13:01
*** zhurong has quit IRC13:02
*** rlandy|ruck is now known as rlandy|ruck|mtg13:02
*** ykarel is now known as ykarel|afk13:04
*** apetrich has quit IRC13:06
*** ekultails has quit IRC13:07
*** ekultails has joined #openstack-infra13:08
*** yamamoto has quit IRC13:08
*** yamamoto has joined #openstack-infra13:09
*** yamamoto has quit IRC13:09
*** mriedem has joined #openstack-infra13:10
*** ykarel|afk has quit IRC13:10
*** jaosorior has quit IRC13:11
*** smarcet has joined #openstack-infra13:11
*** markvoelker has joined #openstack-infra13:14
*** boden has joined #openstack-infra13:14
bodenanyone know why I might be having errors resolving the conditional versions of sphinx in the requirements-check job: 'markers': "python_version=='2.7'" does not match "python_version>='3.4'"13:15
bodenhttp://logs.openstack.org/96/664596/9/check/requirements-check/06e443e/job-output.txt.gz#_2019-06-12_20_47_46_37657413:15
bodenprobably something simple, but I can't seem to find it13:15
*** markvoelker has quit IRC13:18
*** lseki has joined #openstack-infra13:18
*** roman_g has joined #openstack-infra13:19
*** bobh has quit IRC13:21
*** apetrich has joined #openstack-infra13:22
*** goldyfruit has joined #openstack-infra13:22
*** udesale has quit IRC13:22
*** udesale has joined #openstack-infra13:24
bodenmaybe it's the backleveled pbr..13:25
*** bhavikdbavishi has quit IRC13:27
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213413:27
*** udesale has quit IRC13:29
fricklerboden: hmm, iiuc you need to match the entry in test-requirements.txt to what you add in doc/reqs.txt13:30
openstackgerritMatthieu Huin proposed zuul/zuul master: Zuul CLI: allow access via REST  https://review.opendev.org/63631513:34
openstackgerritMatthieu Huin proposed zuul/zuul master: Add Authorization Rules configuration  https://review.opendev.org/63985513:34
openstackgerritMatthieu Huin proposed zuul/zuul master: Web: plug the authorization engine  https://review.opendev.org/64088413:35
*** yamamoto has joined #openstack-infra13:37
*** dave-mccowan has joined #openstack-infra13:41
bodenfrickler hm ok, maybe that's it13:41
*** yamamoto has quit IRC13:42
*** jamesmcarthur has joined #openstack-infra13:43
fricklerinfra-root: someone complained in #openstack about SSL errors when connecting to eavesdrop.o.o, maybe we should disable port 443 in apache2 when it serves no content. or use that as the next target for the LE deployment? the current virtualhost definition is indeed only for port 8013:44
fungiahh, yep, responded there as well but i think we concluded a while back that we should unconfigure that listening port for apache until the service is redeployed with letsencrypt on the new domain13:45
*** ricolin has joined #openstack-infra13:45
fricklerinfra-root: also please note that due to some surgery I'll be mostly offline for about a week or so starting tomorrow13:45
*** goldyfruit has quit IRC13:46
*** goldyfruit has joined #openstack-infra13:46
fricklerfungi: yeah, my response there was written thinking that this was happening in the -infra channel13:46
fungiyoctozepto: yep, we're still also maintaining the hound instance at codesearch.openstack.org and the gitea maintainers are aware search needs a better implementation. https://github.com/go-gitea/gitea/issues/6648 is probably the most relevant issue about it (we're hoping for something along those lines, but if you like hacking in go maybe you want to help them out with it?)13:47
*** tosky has quit IRC13:48
*** ykarel|afk has joined #openstack-infra13:48
yoctozeptofungi: yeah, codesearch is <313:50
fungiwell, it has its own pains13:50
yoctozeptoso far I only noticed it does not remember selected projects when refreshed13:51
fungialso only searches master branch, plus needs an outage to add/remove/rename repositories and then takes quite a while to reindex on start13:51
fricklerfungi: yoctozepto: comparing with http://codesearch.openstack.org/?q=tox-docs&i=nope&files=&repos=zuul/zuul it seems that the gitea search is ignoring "hidden" files, i.e. starting with a dot, but I couldn't find an issue for that, do you know whether there is one?13:51
yoctozeptoas the search resets them13:51
*** smarcet has quit IRC13:51
*** tosky has joined #openstack-infra13:52
*** rossella_s has quit IRC13:52
fungifrickler: i haven't seen one. odds are that behavior will change in the indexing refactor they're planning, but might be good to file it just so they take that into account for the new design13:52
*** apetrich has quit IRC13:56
*** apetrich has joined #openstack-infra13:56
*** gfidente has quit IRC13:59
*** rossella_s has joined #openstack-infra13:59
*** gfidente has joined #openstack-infra14:01
*** ykarel|afk is now known as ykarel14:03
clarkbboden note those marker messages are benign. It is just saying that the entry for python >= 3.4 does not apply when executed under python 2.714:05
*** igordc has joined #openstack-infra14:05
*** szaher has quit IRC14:05
fricklerboden: tested locally that amending test-requirements.txt fixes the issue. you also need to use ">=1.6.5" instead of 1.6.2 matching lower-constraints14:06
*** rlandy|ruck|mtg is now known as rlandy|ruck14:10
*** xek_ has quit IRC14:13
*** markvoelker has joined #openstack-infra14:14
*** sreejithp has joined #openstack-infra14:17
*** szaher has joined #openstack-infra14:19
*** markvoelker has quit IRC14:19
*** gfidente has quit IRC14:19
*** ricolin has quit IRC14:21
*** gfidente has joined #openstack-infra14:21
*** yamamoto has joined #openstack-infra14:23
*** igordc has quit IRC14:42
bodenfrickler clarkb thank you for the tips!14:42
openstackgerritStephen Finucane proposed openstack/pbr master: Resolve some issue with tox.ini, setup.cfg  https://review.opendev.org/66029714:46
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213414:59
*** yboaron_ has quit IRC15:00
*** tosky has quit IRC15:01
*** sthussey has joined #openstack-infra15:02
*** tosky has joined #openstack-infra15:04
corvusianw, clarkb: ntpd fails to start because systemd starts it before unbound and it can't resolve hostnames15:07
corvusi think this may happen on our production machines.15:08
*** igordc has joined #openstack-infra15:23
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213415:24
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213415:31
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213415:32
openstackgerritStephen Finucane proposed openstack/openstack-zuul-jobs master: Add support for building PDFs  https://review.opendev.org/66455515:34
*** dpawlik has quit IRC15:35
*** yamamoto has quit IRC15:35
*** gyee has joined #openstack-infra15:35
*** ykarel is now known as ykarel|away15:35
*** pgaxatte has quit IRC15:36
openstackgerritDavid Shrewsbury proposed zuul/zuul master: Split plugin tests into two  https://review.opendev.org/66516115:41
*** bhavikdbavishi has joined #openstack-infra15:45
corvusShrews: do you want to handle restarting nodepool, and i can take care of restarting zuul?15:46
Shrewscorvus: sure thing15:47
Shrewsclarkb: you restarted builders recently, right?15:47
Shrewslooks like nb01 and nb02 restarted on June 10. nb03 on June 0315:50
corvusrestarting zuul now15:51
Shrewsi think builders are fine. will do launchers now15:51
*** bhavikdbavishi1 has joined #openstack-infra15:53
*** diablo_rojo has joined #openstack-infra15:54
*** bhavikdbavishi has quit IRC15:54
*** bhavikdbavishi1 is now known as bhavikdbavishi15:54
clarkbShrews: yup builders are fine15:56
clarkbcorvus: is zuul restart keeping the repl change?15:57
*** ginopc has quit IRC15:57
corvusclarkb: yes15:57
Shrews#status log Restarted nodepool launchers on commit 3412764a985b511cdc6b70dc801ffdb357ec02c215:58
openstackstatusShrews: finished logging15:58
Shrewscorvus: done15:58
corvusscheduler is back up, executors are catching up15:59
*** ofosos has joined #openstack-infra16:03
corvusexecutors are up16:03
clarkbunrelated to hte zuul restart the iad kafs mirror still seems to be working16:04
*** kjackal has quit IRC16:04
*** sshnaidm is now known as sshnaidm|off16:04
corvus#status log restarted all of zuul on 7e45f84f056b3fa021aae1eecb0c23d9055656f3 (with repl change cherry-picked onto scheduler)16:04
openstackstatuscorvus: finished logging16:04
*** iurygregory has quit IRC16:05
*** e0ne has quit IRC16:07
*** jbadiapa has quit IRC16:07
*** ccamacho has quit IRC16:08
corvusre-enqueue finished16:09
corvusinfra-root: we have not cleared our zuul job backlog since this weekend.16:09
fungiyeesh16:10
corvushttp://grafana.openstack.org/d/T6vSHcSik/zuul-status?orgId=1&fullscreen&panelId=17&from=now-7d&to=now16:10
fungiyeah, seems we *nearly* caught up early utc tuesday but quickly lost ground again16:11
fungilooks like throughput is decent at least16:12
fungihovering around 700-800jph the entire time16:12
*** olaph has quit IRC16:12
corvuswe'll save like 30s per job when we drop the zuul cloner shim :)16:12
fungiyeah16:12
fungi11 days16:12
*** andreykurilin has quit IRC16:13
Shrewshrm, that grafana graph refuses to load for me16:13
corvusthat'll be like another 144 jobs per day we can run :)16:13
*** rpittau is now known as rpittau|afk16:13
*** andreykurilin has joined #openstack-infra16:14
clarkbI'm going through and trying to count the number of certs I need (and names per cert) and am I just misremembering that we had one giant cert with a bunch of altnames? not finding it anymore16:14
*** dims has quit IRC16:14
corvusShrews: weird... can you go to grafana.openstack.org and load the "zuul status" dashboard?16:14
corvusclarkb: static and files are the places where i would expect that16:15
Shrewscorvus: tried that. none of the graphs are loading, even after a FF restart16:15
clarkboh its static16:15
corvusclarkb: (but i think on files, we have a bunch of certs with SNI)16:15
*** markvoelker has joined #openstack-infra16:16
*** lucasagomes has quit IRC16:16
clarkbI think files may be different cert per vhost16:16
clarkband then static is bunch of names with SNI16:16
corvusShrews: wow.  erm.  well, it's sort of a squiggly line that's flatish over the weekend then goes up and down a bit but mostly stays up.  that help?16:16
clarkbShrews: you may have the old graphite.openstack.org backend cached16:17
Shrewscorvus: perfect16:17
clarkbtry a hard refresh?16:17
clarkbok I'll work on putting an etherpad together with listings, then I can go spend some money and hopefully rotate out hiera data a bit later today16:18
*** jpich has quit IRC16:18
Shrewsnope. no good. oh well. my life will just be graphless on this machine16:18
*** markvoelker has quit IRC16:20
*** jbadiapa has joined #openstack-infra16:21
corvusShrews: you'll have a completely different firefox tomorrow, maybe it will work then16:22
*** dtantsur is now known as dtantsur|afk16:22
Shrewscorvus: maybe i'll have to wait for the paid version coming out in a few months16:23
corvus"value-add"16:26
fungiShrews: check to see if you're blocking requests from that page maybe16:27
fungiit needs to be able to fetch from graphite.opendev.org16:27
fungii have to explicitly allow that in privacy badger, for example16:28
*** jamesmcarthur_ has joined #openstack-infra16:29
clarkbinfra-root: https://etherpad.openstack.org/p/2019-june-ssl-cert-refresh how does that look?16:31
clarkbfungi: because the domain is different?16:32
fungiclarkb: i think that may be why, but am not sure16:32
*** jamesmcarthur has quit IRC16:32
*** Lucas_Gray has quit IRC16:33
fungia page on grafana.openstack.org making requests to fetch content from graphite.opendev.org seems to cause effpb to think it's a "third party tracker" so seems likely the cause16:33
corvusclarkb: is git.zuul-ci.org ok?16:33
clarkbcorvus: git.zuul-ci.org:443                             Valid        Mar 26 2020  287 seems to be16:33
corvusi'm guessing the same for airship?16:34
Shrewsfungi: ooh, i use pb too. lemme check16:34
clarkbcorvus: ya airship I had to replace last month16:34
clarkbgit.airshipit.org:443                           Valid        May 12 2021  69916:34
*** dims has joined #openstack-infra16:35
corvusclarkb: lgtm16:35
fungiclarkb: are we sure that's accurate? my browser says 30 November 2019 for git.zuul-ci.org16:35
Shrewsfungi: that was it. you are geenyus16:35
corvusfungi: is that after the redirect?16:35
fungiShrews: not that genius, i beat my head against it for a while before i noticed the little icon in the corner of my browser16:35
*** tdasilva has joined #openstack-infra16:35
fungicorvus: d'oh! yep16:36
fungithat would be it16:36
fungiclearly not genius ;)16:36
fungii was looking at our opendev.org cert16:36
* fungi sighs16:36
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213416:36
clarkbthen the other question I was gonna ask, since these will be issued for 2 years should we consider increasing the number of bits in our key?16:36
clarkbfungi: ^ probably question for you16:37
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: new devstack-based functional job  https://review.opendev.org/66502316:37
fungiyou're generating these on bridge.o.o, right? it has newer openssl with a larger default keysize i think, but checking16:37
fungiahh, we hardcode rsa:2048 in gencert.sh16:38
*** weifan has joined #openstack-infra16:38
clarkbya16:38
clarkbseems like 2048 is on the edge of what is recommended now? like its good enough for today but may not be good in 2 years?16:38
*** noonedeadpunk has left #openstack-infra16:39
fungiit looks like we're doing 2048 for our letsencrypt certs too16:40
fungiwe could bump it to 3072, sure16:40
fungithough really 2048 is likely good for many years to come, the concern is someone recording traffic now and then decrypting it decades from now16:41
clarkbapparently some devices can only do up to 204816:41
clarkbreading more I think 2048 is probably fine16:42
clarkband may make clients happier16:42
*** weifan has quit IRC16:42
clarkbI'm about to pop out for my daily bike ride. We can think about it a bit more as I won't do any cert generation until a bit later16:44
*** pkopec is now known as pkopec|afk16:46
clarkbBut ya plan is to issue 2 year certs from namecheap based on my list on the etherpad16:46
fungiin a 2003 report, rsa labs suggested 2048-bit keys are likely good through at least 203016:48
fungihttps://www.emc.com/emc-plus/rsa-labs/historical/twirl-and-rsa-key-size.htm16:48
fungier, need the wayback for that16:49
fungihttps://web.archive.org/web/20170417095741/https://www.emc.com/emc-plus/rsa-labs/historical/twirl-and-rsa-key-size.htm16:49
openstackgerritMatt McEuen proposed openstack/project-config master: Add airship/election  https://review.opendev.org/66464116:51
*** weifan has joined #openstack-infra16:53
*** weifan has quit IRC16:53
*** weifan has joined #openstack-infra16:53
*** weifan has quit IRC16:54
*** weifan has joined #openstack-infra16:54
openstackgerritAdam Coldrick proposed opendev/storyboard-webclient master: Render user-submitted links with nofollow attribute  https://review.opendev.org/64832216:54
*** weifan has quit IRC16:55
*** weifan has joined #openstack-infra16:55
*** jamesmcarthur_ has quit IRC16:57
*** jamesmcarthur has joined #openstack-infra16:58
*** kopecmartin is now known as kopecmartin|off17:01
*** derekh has quit IRC17:03
*** rpioso|afk is now known as rpioso17:05
*** e0ne has joined #openstack-infra17:05
*** ykarel|away has quit IRC17:06
*** mattw4 has joined #openstack-infra17:07
openstackgerritMerged opendev/storyboard master: Change the dist name to 'storyboard-api'  https://review.opendev.org/66166317:07
*** pcaruana has joined #openstack-infra17:09
*** nicolasbock has quit IRC17:10
*** ociuhandu has quit IRC17:15
*** jpena is now known as jpena|off17:19
*** e0ne has quit IRC17:23
*** panda has quit IRC17:24
openstackgerritJames E. Blair proposed zuul/zuul master: Correct quick-start executor volume error  https://review.opendev.org/66518617:25
*** ralonsoh has quit IRC17:26
*** panda has joined #openstack-infra17:27
*** pkopec|afk has quit IRC17:29
*** pkopec|afk has joined #openstack-infra17:29
*** yamamoto has joined #openstack-infra17:33
*** whoami-rajat has joined #openstack-infra17:38
*** ramishra has quit IRC17:44
*** signed8bit has quit IRC17:52
*** jtomasek has quit IRC17:53
openstackgerritMerged opendev/storyboard master: Retry on DB deadlock when updating story  https://review.opendev.org/65061417:55
*** jtomasek has joined #openstack-infra17:55
*** gfidente has quit IRC17:56
*** jamesmcarthur has quit IRC17:58
clarkbfungi: ok given that I'll stick with the 2048 bit key size17:58
*** Goneri has joined #openstack-infra18:03
*** gyee has quit IRC18:04
*** donnyd has joined #openstack-infra18:10
donnydIs there a way to contribute resources to infra outside of having a 100 or so public IP's18:13
*** ianychoi has quit IRC18:13
clarkbdonnyd: those IPs can be ipv6 addresses, but because we run a multi cloud CI system operating without public IPs that can talk to each other gets difficult and we aren't set up to do that18:13
donnydOk18:13
donnydso IPv6 can be used18:14
donnydSo If I had some resources to contribute, what would be the minimum to be useful?18:14
clarkbyes, we'll need 2 IPv4 addresses in that case (one for the mirror node and one for outbound NAT from the test nodes because github etc cannot ipv6)18:14
clarkbits possible the mirror node might be able to sit behind that one NAT address too but I don't think we have ever tested that18:15
mnaserit probably could just fine imho18:15
mnaserbut pure speculation :)18:15
donnydstorage?18:15
clarkbdonnyd: I think we need at least 100GB for the mirror node (it caches a bunch of data in the region to avoid hitting the internet so much for it)18:16
clarkbthen each test node wants ~80GB disk18:16
donnydI guess I will get to the point, I built a micro cloud and the project is done on the gear.. so its just sitting here. I have a couple hundred cpus a TB or so of memory and 100TB of storage18:16
clarkbdonnyd: the test nodes tend to be 8vcpu, 80GB disk, and 8GB ram. We can likely tweak the cpu number or oversubscribe depending on how it works out, but jobs need a bit of disk to juggle git repos and so on and 8GB memory anymore seems to be a minmum18:17
*** markvoelker has joined #openstack-infra18:17
clarkbas for how many is useful to get started, We try to target that 100 number while understanding that it won't necessraily happen upfront. I think we've started with as little as 10 beofre and ramped up18:18
clarkb(basically we can be flexible and try to work with the clouds to find what works for them and us)18:19
*** gyee has joined #openstack-infra18:19
*** tosky has quit IRC18:21
*** markvoelker has quit IRC18:22
*** bhavikdbavishi has quit IRC18:23
*** michael-beaver has joined #openstack-infra18:23
efriedclarkb: back-of-napkin, would adding this amount of hardware result in a noticeable reduction in queue times?18:25
efried(I have absolutely no sense of how much we have right now, or what % increase this represents)18:26
donnydI can do 100 an not even notice18:26
donnydand*18:26
clarkbefried: donnyd http://grafana.openstack.org/d/rZtIH5Imz/nodepool?orgId=1 is current status18:28
clarkbwe seem to be able to use about 550 full steam ahead right now so that would be about 20% increase. Likely would have an impact18:28
openstackgerritJames E. Blair proposed zuul/zuul master: Change default job_dir location  https://review.opendev.org/66518618:28
efriednice18:28
clarkbthe building and error numbers there seem a bit high. I wonder if we have a region that has taken a lunch break18:28
donnydOk, I will have to swap some things around here, but if someone is willing to work with me.. I am willing to contribute18:32
*** pkopec|afk has quit IRC18:32
donnydhow important is storage performance?18:33
donnydThe front end of my ceph cluster is only 10G, so is 1Gb R/W speeds sufficient?18:34
clarkbmnaser: ^ you probably know best re the ceph performance18:35
clarkbdonnyd: I'm certainly willing to try it :)18:35
clarkbalso I'm happy to work with you on that. Though I've got to renew certs today/tomorrow and then I'm taking most of next week off. So if we want to move quickly we might need a different volunteer18:35
donnydI am out next week too, so no biggie18:36
donnydwhat about persistent storage? any requirements for keeping data long term?18:38
donnydlike logs and what not. Are they stored on the cloud they are built on?18:38
clarkbdonnyd: they are stored remotely so yo udon't have to worry about that. The mirror node we spin up acts as a cache too so isn't canonical source of data either (and we can delete it if necessary)18:39
donnydok cool18:39
openstackgerritMark Meyer proposed zuul/zuul master: Extend event reporting  https://review.opendev.org/66213418:39
*** weifan has quit IRC18:49
*** yamamoto has quit IRC18:52
clarkbdoing this I've realized that maybe the cert stuff should/could be tracked in git? but for now I'm just going to add a bit extra organization18:52
clarkbthen think a bit more baout how a git repo for that would look18:53
*** dpawlik has joined #openstack-infra18:54
clarkbthough maybe this is the last time it needs to be orngaized to meh18:55
*** jamesmcarthur has joined #openstack-infra18:56
clarkbI'm taking the hiera lock18:56
clarkb#status log Updated ask.openstack.org's ssl cert as part of regular refresh cycle.19:00
openstackstatusclarkb: finished logging19:00
clarkbThats my do one first run. If that looks good after lunch I should be able to tear through the other 15 single name cert updates pretty quickly19:01
fungiyeah, just make sure to update the chain cert in addition to the new cert (and key if you generated a new one)19:01
fungiit's tempting to assume the chain certs will all be the same, but that's not guaranteed to be the case19:01
clarkbyup all three got updated19:03
clarkb(they have indeed updated the chain)19:03
funginever a dull moment where public key infrastructure is concerned19:04
*** bnemec has quit IRC19:06
*** markvoelker has joined #openstack-infra19:18
*** raissa has joined #openstack-infra19:18
*** weifan has joined #openstack-infra19:21
openstackgerritPaul Belanger proposed zuul/zuul master: Improve retry handling for github driver  https://review.opendev.org/66522019:21
*** markvoelker has quit IRC19:23
*** weifan has quit IRC19:23
*** jamesmcarthur has quit IRC19:24
*** e0ne has joined #openstack-infra19:25
clarkbask's puppetry doesn't restart apache on cert update. I'm doing that now19:26
clarkbmy browser is happy with the new cert there. Given that I will work through the other 15 in a larger batch after lunch19:27
johnsomfyi, the iad rax mirror seems to be unhappy: http://logs.openstack.org/07/665207/2/check/octavia-v2-dsvm-noop-api-stable-stein/00ea536/controller/logs/devstacklog.txt.gz#_2019-06-13_19_02_55_50519:29
johnsomI just had three jobs fail to stack due to missing packages.19:29
clarkbjohnsom: that is because the package is http://mirror.iad.rax.opendev.org/ubuntu/pool/main/g/gcc-7/libgfortran4_7.4.0-1ubuntu1~18.04.1_amd64.deb not http://mirror.iad.rax.opendev.org/ubuntu/pool/main/g/gcc-7/libgfortran4_7.4.0-1ubuntu1~18.04_amd64.deb19:30
clarkbmaybe you need an apt-get update or the package deps are broken?19:31
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: new devstack-based functional job  https://review.opendev.org/66502319:31
johnsomI get the same on three different packages and the jobs at the other hosts are running.19:32
*** takamatsu has quit IRC19:32
johnsomWe didn't change any package deps, etc.19:32
clarkbjohnsom: ya its part of the dep chain for libgfortran4 looks like19:32
clarkbso not something you are directly asking for19:32
clarkbI wonder if we are having similar behavior to the openafs node on bionic but with kafs where an index type file is out of date19:32
clarkbfungi: ^19:33
johnsomlol, we aren't crazy enough to start coding in fortran... lol19:34
corvusi'm crazy enough, but i don't think i'm smart enough.19:34
fungiclarkb: hrm, maybe...19:35
clarkbhttp://mirror.iad.rax.opendev.org/ubuntu/dists/bionic-updates/main/binary-amd64/Packages points to the right file now19:35
clarkbsays Filename: pool/main/g/gcc-7/libgfortran4_7.4.0-1ubuntu1~18.04.1_amd64.deb19:36
fungidid it update?19:36
clarkbNot sure how I would tell19:36
clarkbjust observing the current index seems to point to the file that does exist19:37
clarkbwhich makes me think that ya maybe their job needed an apt-get update19:37
clarkb(though we should keep the old files around long enough that that isn't strictly necessary)19:37
corvusthe log had an apt-get update right before that install19:37
fungiso possible at the time the mirror server was serving an out of date reference but has since updated?19:38
corvus    Last Update Thu Jun 13 11:38:58 201919:38
clarkbfungi: that is what it is beginning to look like19:38
corvusmy math says the last volume update was at 18:38 utc19:38
corvusthat's still 24 minutes before the apt-get update/install in the job19:39
fungihrm...19:39
corvus(that's from "vos examine mirror.ubuntu")19:39
clarkband we are also supposed to keep the old files around for like 3-4 hours iirc so a couple things going on here that we don't expect19:39
corvusmaybe cachefilesd doesn't invalidate like openafs19:40
corvus(if so, maybe it was serving an outdated version of the package index)19:41
johnsomIf it's any help, just had another job hit the fortran file: http://logs.openstack.org/23/664123/5/check/octavia-v2-dsvm-py2-scenario/5bf6507/controller/logs/devstacklog.txt.gz#_2019-06-13_19_37_28_58119:41
yoctozeptoah, just came to say ubuntu mirror has problems but you guys know it already, that's proactive :-)19:42
clarkbcorvus: reading the manpage for the cachefilesd config file i'm beginning to think it doesn't19:43
clarkbcorvus: it seems to cull based on available disk space19:43
yoctozeptokolla hit e.g.: Failed to fetch http://mirror.iad.rax.opendev.org/ubuntu/pool/main/b/binutils/binutils-common_2.30-21ubuntu1~18.04.1_amd64.deb  404  Not Found [IP: 104.130.4.160 80]19:43
auristorclarkb there were some callback handling fixes merged as part of the 5.2 merge window.  I don't know if they were backported to 5.1.9.19:43
yoctozeptoand it was right after apt-get update19:43
fungiyoctozepto: thanks, same server where we're trying out kafs so likely related19:44
corvusauristor: for kafs?19:44
*** rf0lc0 has quit IRC19:44
*** rfolco has joined #openstack-infra19:44
clarkbah I suppose it would want to cull in addition to doing invalidation the openafs way so that doesn't necessary rule the expected behavior out. But if there are bugs...19:44
fungiand yeah, that server is booting from a custom build of linux 5.1.919:45
fungi(just confirmed)19:45
yoctozeptofungi: no problem, here is a basket of failures: http://logs.openstack.org/48/495148/77/check/kolla-build-ubuntu-source/f13ba68/logs/build/19:45
yoctozeptoin case you are tracking files19:45
clarkbI've got to make lunch now, but I think that bionic-updates packages file is up to date at least. Not sure about the other dists19:46
clarkbwe'll likely be fine until the next update from upstream19:47
yoctozeptoi run a recheck for us19:47
yoctozeptoplease ping me when you think you found the cause (always curious)19:48
*** whoami-rajat has quit IRC19:48
openstackgerritPaul Belanger proposed zuul/zuul master: Improve retry handling for github driver  https://review.opendev.org/66522019:48
fungii suppose we could try building from linux-next and seeing if the problem persists19:49
*** xek has joined #openstack-infra19:50
fungior 5.2-rc4 according to kernel.org (assuming the mentioned improvements made it in by sunday)19:56
auristorthe kafs callback fixes were in 5.2-rc119:57
fungiahh, cool, thanks!19:58
*** auristor has quit IRC19:58
*** eharney has quit IRC20:01
fungiianw: what was your build process for the 5.1.9 kernel? or did you grab that deb from somewhere else?20:02
* fungi is familiar with the process for doing custom debian kernel packages, but not sure if the process is the same on ubuntu20:03
clarkbfungi: I believe there is a dnm change up fkr that20:04
*** e0ne has quit IRC20:04
openstackgerritJames E. Blair proposed zuul/zuul master: Improve retry handling for github driver  https://review.opendev.org/66522020:05
openstackgerritJames E. Blair proposed zuul/zuul master: Improve retry handling for github driver  https://review.opendev.org/66522020:07
fungithanks clarkb, will find20:11
*** markvoelker has joined #openstack-infra20:19
*** markvoelker has quit IRC20:24
openstackgerritMerged zuul/zuul master: Split plugin tests into two  https://review.opendev.org/66516120:31
* fungi did not find, still searching20:34
*** pcaruana has quit IRC20:36
openstackgerritJames E. Blair proposed zuul/zuul master: Change default job_dir location  https://review.opendev.org/66518620:43
*** auristor has joined #openstack-infra20:43
openstackgerritMatthieu Huin proposed zuul/zuul master: Web: plug the authorization engine  https://review.opendev.org/64088420:44
*** yamamoto has joined #openstack-infra20:47
*** panda has quit IRC20:49
openstackgerritMatthieu Huin proposed zuul/zuul master: Zuul Web: add /api/user/authorizations endpoint  https://review.opendev.org/64109920:49
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: new devstack-based functional job  https://review.opendev.org/66502320:50
*** panda has joined #openstack-infra20:51
*** bnemec has joined #openstack-infra20:52
openstackgerritMerged opendev/system-config master: linters: ensure openstack/inventory.yaml parses  https://review.opendev.org/66475120:54
*** bobh has joined #openstack-infra20:56
openstackgerritMatthieu Huin proposed zuul/zuul master: Web: plug the authorization engine  https://review.opendev.org/64088420:57
*** xek has quit IRC20:57
clarkbfungi: https://review.opendev.org/66505721:00
*** dpawlik has quit IRC21:01
openstackgerritKevin Carter (cloudnull) proposed openstack/project-config master: Retire independent ansible role  https://review.opendev.org/66523721:05
*** kaisers1 has joined #openstack-infra21:07
*** kaisers has quit IRC21:09
*** jtomasek has quit IRC21:10
*** raissa has quit IRC21:10
*** takamatsu has joined #openstack-infra21:13
*** mriedem has quit IRC21:19
*** markvoelker has joined #openstack-infra21:20
fungihuh, no idea why i didn't see that in the list21:21
fungilooks like https://kernel.ubuntu.com/~kernel-ppa/mainline/ does include release candidates for 5.221:23
fungiincluding sunday's rc421:23
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: new devstack-based functional job  https://review.opendev.org/66502321:24
*** markvoelker has quit IRC21:24
ianwfungi: on IAD in /opt there's a linux directory, i used the inbuilt bindeb-pkg ... i'm still catching up but i can kick off a build of master now21:36
*** bobh has quit IRC21:36
clarkbso much button clicking and file copying21:36
ianwi have to dash for about ~1 hour, but it's building a current master kernel on IAD which we can try, it will take about 15 minutes but debs should come out in /opt/linux on IAD ... bib21:37
*** bobh has joined #openstack-infra21:42
*** sreejithp has quit IRC21:43
*** slaweq has quit IRC21:43
*** slaweq has joined #openstack-infra21:45
fungiianw: cool--thanks!21:45
*** bobh has quit IRC21:46
*** slaweq has quit IRC21:49
*** boden has quit IRC21:53
clarkbok taking the hiera lock again to update 13 more ssl certs ( my single name cert list less git.starlingx.io and openstackid.org)21:58
*** bnemec has quit IRC22:05
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: new devstack-based functional job  https://review.opendev.org/66502322:17
*** jamesmcarthur has joined #openstack-infra22:18
*** pfallenop has quit IRC22:24
*** takamatsu has quit IRC22:25
*** dave-mccowan has quit IRC22:26
*** yamamoto has quit IRC22:29
clarkbok all of the single domain openstack.org certs have been updated in hiera now22:29
clarkbI'm going to restart apache on files.o.o to pick up the changes there22:30
corvuspabelanger: i may not be around consistently enough in 30+ mins to be responsible for a restart; but feel free to proceed if you're comfortable, or i can help again tomorrow morning22:32
pabelangercorvus: ack, I'll see if ianw is around, if not tomorrow also works22:32
clarkbI'm verifying openstackid.org and git.starlingx.io certs nowish. That requires the dns dance which is why I am doing them separately22:35
*** slaweq has joined #openstack-infra22:36
*** tobiash has quit IRC22:40
*** pfallenop has joined #openstack-infra22:40
*** slaweq has quit IRC22:41
openstackgerritJason E. Rist proposed openstack/project-config master: Retiring TripleO-UI and associated projects.  https://review.opendev.org/66525922:43
*** yamamoto has joined #openstack-infra22:44
*** aaronsheffield has quit IRC22:45
*** rcernin has joined #openstack-infra22:45
*** weifan has joined #openstack-infra22:46
ianwok i'm back :)22:46
*** harlowja has quit IRC22:47
*** tesseract has quit IRC22:48
*** yamamoto has quit IRC22:50
*** dave-mccowan has joined #openstack-infra22:50
*** tkajinam has joined #openstack-infra22:51
*** ekultails has quit IRC22:51
*** dtroyer has quit IRC22:52
clarkbok git.starlingx.io and openstackid.org ssl certs updated in hiera now too22:52
*** dtroyer has joined #openstack-infra22:52
clarkbI need to restart apache on review.o.o to pick up the new cert. Any reason to not do it really quickly now?22:53
clarkbinfra-root ^22:54
*** goldyfruit has quit IRC22:54
fungisounds good, and that will also pick up the lingering commentlink change for certain zuul job result types?22:59
clarkbjust apache not gerrit23:00
clarkbfungi: how do I update the ssl cert on the wiki?23:02
clarkbis that manual? and if so would you prefer to do it?23:02
clarkbcertcheck reports only static (and friends) and wiki.openstack.org as expiring in 9 days now23:03
fungioh, right, apache restart should be almost entirely invisible23:04
clarkbI'll do static tomorrow (I hvae to figure out the key generation with multiple altnames) and can do wiki as soon as I know what the process is there23:04
fungisure, i can update it... entirely manual since the production server is still not config-managed23:04
clarkbfungi: ok, hiera and /root/certs/wiki.openstack.org have the data23:04
fungithanks!23:04
clarkbfungi: also note all three files changed23:06
ianwclarkb / fungi : so ubuntu/pool/main/b/binutils/binutils-common_2.30-21ubuntu1~18.04.1_amd64.deb appears to legitimately not be there, it's ".2" now23:08
clarkbianw: ya we had similar with a libgfortran file23:09
clarkbianw: it seemed like the Packages file was not being updated so clients were looking at the old file23:09
clarkband that old file was pointing to oler packages that did not exist23:09
*** yamamoto has joined #openstack-infra23:10
ianwright, so that would suggest that the "vos release" wasn't as atomic as we'd hope?23:10
clarkbfungi: certcheck shows wiki has been updated too now. Thanks!23:10
clarkbianw: ya. auristor pointed out that linux 5.2 includes some fixes for the callbacks that help invalidate cache23:10
clarkbianw: so one idea is there is a bug in that and kafs didn't get notified properly that the file changed23:10
fungiclarkb: "12 June 2021" for https://wiki.openstack.org/ now23:10
*** goldyfruit has joined #openstack-infra23:11
ianwclarkb: right, ok, timeline makes sense now :)  sometimes my mornings are like avengers: endgame :)23:11
clarkbfungi: yup. That leaves the one multiname cert as the remaining cert I need to update. I'll do that tomorrow morning23:11
clarkbianw: today was last day of school before summer break for the kids. I know the feeling :)23:12
fungisounds good. thanks for tackling all these?23:12
fungis/?/!!!/23:12
*** _erlon_ has quit IRC23:12
clarkbthe best news is certcheck will be a bit quieter tomorrow in my inbox23:13
*** yamamoto has quit IRC23:13
clarkbalso comodo is becoming sectigo so you may notice that some certs are signed by comodo and some are signed by sectigo. This is normal and apparently expected23:14
fungisectigo. interesting23:14
ianwok, rebooting iad to 5.2.0-rc423:16
ianwi think we should probably switch in dfw with openafs 1.8.3 packages too, to validate that23:17
clarkb#status log developer.openstack.org docs.openstack.org ethercalc.openstack.org etherpad.openstack.org firehose.openstack.org git.openstack.org git.starlingx.io openstackid-dev.openstack.org openstackid.org refstack.openstack.org review.openstack.org storyboard.openstack.org translate.openstack.org wiki.openstack.org zuul.openstack.org ssl certs updated as part of normal refresh cycle.23:17
openstackstatusclarkb: finished logging23:17
clarkbianw: that seems like a good idea considering kafs seems to have some maybe unhappy behavior (and we hope kernel upate fixes but it may not)23:18
*** slaweq has joined #openstack-infra23:19
ianwok, iad back and up serving with 5.2.0-rc4 ; cachefilesd is running23:19
*** dave-mccowan has quit IRC23:20
ianwi think we have to validate it with that ... right now it's rax internal for the afs network access, but when it's globally distributed mirrors we know we need all the caching we can get23:20
clarkbya particularly when crossing the atlantic23:21
*** markvoelker has joined #openstack-infra23:22
ianwthe unbound/ntp thing is interesting.  might be good to put a reboot: into our base job CI to validate it23:23
*** jamesmcarthur has quit IRC23:24
*** markvoelker has quit IRC23:26
openstackgerritMerged zuul/zuul master: Improve retry handling for github driver  https://review.opendev.org/66522023:31
*** dave-mccowan has joined #openstack-infra23:40
*** eernst has joined #openstack-infra23:43
*** eernst has quit IRC23:47
*** sthussey has quit IRC23:48
*** eernst has joined #openstack-infra23:49
corvusianw, clarkb, fungi: oh i did some more looking into the ntp thing but i forgot to report23:49
corvusi'm starting to think maybe we should drop ntpd in bionic and just rely on systemd-timesyncd23:50
ianwi'm sure that's considered the way of the future23:51
corvusthere's a debian bug report from like 2010 about howe the init system ordering is wrong for ntpd; and even after a lot of discussion, they never resolved the bug before changing the init system23:51
corvusthis doesn't give me a lot of confidence that it'll get fixed upstream23:51
corvusi guess systemd lets us write shadow configurations, so we could probably put the correct dependencies in there?23:52
*** eernst has quit IRC23:52
*** eernst has joined #openstack-infra23:52
corvusbut, if our production systems haven't been running ntpd because of this bug (it seems that way), and we haven't noticed (probably because they're running on hypervisors that keep their clocks pretty stable?), then it's probably not that important, and perhaps just letting systemd-timesyncd do its thing is enough?23:53
*** slaweq has quit IRC23:56
*** eernst has quit IRC23:57
ianwi think so, or we could just hack around it with a manual restart of ntpd in a late service file ... but how many tools on the system do we need to do the same thing23:57
*** eernst has joined #openstack-infra23:59
ianwi can stack a change before the kernel update and see how we go23:59
*** weifan has quit IRC23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!