Thursday, 2019-09-19

*** slaweq has quit IRC00:02
efried_ptoinfra-root, please promote https://review.opendev.org/#/c/683009/ directly to gate to make 80% of spurious nova failures go away for the time being so we can merge our feature code before RC1, kthx00:08
*** mriedem is now known as mriedem_afk00:09
openstackgerritJames E. Blair proposed zuul/zuul master: WIP: Fix gerrit errors from production  https://review.opendev.org/68300600:10
mriedem_afkclarkb: fyi we decided to do a skip patch https://review.opendev.org/#/c/683009/ to get past http://status.openstack.org/elastic-recheck/#1823251 until RC100:12
mriedem_afkshould help the gate00:12
clarkband no concern that stuff landing in rc1 might break in db migrations?00:13
*** jamesmcarthur has quit IRC00:14
*** slaweq has joined #openstack-infra00:18
*** mattw4 has quit IRC00:21
*** gyee has quit IRC00:22
*** slaweq has quit IRC00:23
*** markvoelker has joined #openstack-infra00:25
*** mpjetta has quit IRC00:27
*** markvoelker has quit IRC00:29
*** whoami-rajat has joined #openstack-infra00:29
openstackgerritIan Wienand proposed zuul/zuul master: Support nodes setting 'auto' python-path  https://review.opendev.org/68227500:29
clarkbchange has been enueued. Not promoting because there are no passing nova changes ahead of it in the gate and this only affects nova unittests00:29
*** ociuhandu has joined #openstack-infra00:40
*** n-saito10 has joined #openstack-infra00:41
*** n-saito10 has left #openstack-infra00:41
*** Goneri has quit IRC00:45
*** ociuhandu has quit IRC00:45
*** dave-mccowan has quit IRC00:47
*** dave-mccowan has joined #openstack-infra00:52
*** jamesmcarthur has joined #openstack-infra00:58
*** markvoelker has joined #openstack-infra01:00
*** jamesmcarthur has quit IRC01:10
*** jamesmcarthur has joined #openstack-infra01:10
*** jamesmcarthur has quit IRC01:15
*** mriedem_afk has quit IRC01:21
*** rkukura has quit IRC01:24
*** yamamoto has joined #openstack-infra01:30
johnsomclarkb FYI, DNS failures over IPv6: https://zuul.opendev.org/t/openstack/build/d57d301d843b4b84a8408ff2cdee81ef/log/controller/logs/unbound_log.txt.gz01:40
*** jamesmcarthur has joined #openstack-infra01:49
*** jamesmcarthur has quit IRC01:58
*** harlowja has joined #openstack-infra01:59
*** rlandy|bbl is now known as rlandy02:01
*** rlandy has quit IRC02:01
*** apetrich has quit IRC02:10
*** ricolin has joined #openstack-infra02:22
*** jamesmcarthur has joined #openstack-infra02:28
*** yamamoto has quit IRC02:33
*** roman_g has quit IRC02:35
*** whoami-rajat has quit IRC02:40
*** markvoelker has quit IRC02:47
*** xinranwang has joined #openstack-infra02:59
*** yamamoto has joined #openstack-infra03:05
*** ykarel|away has joined #openstack-infra03:11
*** weshay has quit IRC03:27
*** psachin has joined #openstack-infra03:34
*** jamesmcarthur has quit IRC03:38
*** jamesmcarthur has joined #openstack-infra03:40
*** jamesmcarthur has quit IRC03:44
*** udesale has joined #openstack-infra04:04
*** jamesmcarthur has joined #openstack-infra04:09
*** rh-jelabarre has quit IRC04:14
*** jamesmcarthur has quit IRC04:16
*** signed8bit has quit IRC04:17
openstackgerritAdam Harwell proposed openstack/project-config master: Identify voting bots  https://review.opendev.org/68302804:29
*** ykarel|away has quit IRC04:30
*** signed8bit has joined #openstack-infra04:30
*** pcaruana has joined #openstack-infra04:42
*** ramishra has joined #openstack-infra04:43
*** xarses has quit IRC04:46
*** xarses has joined #openstack-infra04:47
openstackgerritMerged openstack/infra-manual master: Document "clean check" requirement  https://review.opendev.org/68293304:50
*** jamesmcarthur has joined #openstack-infra04:51
*** dchen has quit IRC04:54
*** ykarel|away has joined #openstack-infra04:54
*** jamesmcarthur has quit IRC04:56
*** rcernin_ has joined #openstack-infra04:56
*** dchen has joined #openstack-infra04:57
*** ykarel|away is now known as ykarel04:57
*** rcernin has quit IRC04:59
*** jtomasek has joined #openstack-infra05:02
*** signed8bit has quit IRC05:03
*** aaronsheffield has quit IRC05:04
*** dchen has quit IRC05:11
*** dchen has joined #openstack-infra05:13
*** jamesmcarthur has joined #openstack-infra05:17
*** signed8bit has joined #openstack-infra05:18
*** janki has joined #openstack-infra05:21
*** jamesmcarthur has quit IRC05:22
rm_workAJaeger: wait what does "sort properly" mean?05:37
openstackgerritAdam Harwell proposed openstack/project-config master: Identify voting bots  https://review.opendev.org/68302805:39
rm_worktrying my only guess but it doesn't make sense to me05:39
*** soniya29 has joined #openstack-infra05:54
*** xinranwang has quit IRC06:08
AJaegerrm_work: https://zuul.opendev.org/t/openstack/build/091d3fa9f77046b28871f4548c90ebb5/log/job-output.txt#479 is the error, you need to update the tool we use for checking06:09
rm_workoh06:10
rm_workok so the order in the file doesn't matter?06:10
rm_workor this is in addition?06:10
AJaegerin addition ;)06:10
rm_worklol k06:10
openstackgerritAdam Harwell proposed openstack/project-config master: Identify voting bots  https://review.opendev.org/68302806:11
rm_workwhat do you think? :D06:11
rm_workthe bots are getting frustrating for us, now that they cause so much noise in a field we intended to use for filtering <_<06:12
rm_workbefore they were just funny06:12
*** kopecmartin|off is now known as kopecmartin06:18
*** prometheanfire has quit IRC06:23
*** prometheanfire has joined #openstack-infra06:24
*** markvoelker has joined #openstack-infra06:27
AJaegerrm_work: I saw these bots mis-vote and was laughing when I saw it.06:27
AJaegerrm_work: but I also saw real contributors (cores in other projects) get confused and click on the wrong line.06:28
*** ralonsoh has joined #openstack-infra06:28
rm_workyes i've seen that too, but normally quickly fixed06:28
rm_worki've even done it once06:28
rm_workbut real people realize quickly06:28
AJaegerrm_work: let's give the TC a heads-up since this points out a community problem.06:28
rm_workyeah, seems like a fair idea06:28
AJaegerevrardjp, mnaser, ttx, heads up on  https://review.opendev.org/683028 , in case you want to share with the rest of the TC or have any opinion on it.06:29
rm_workjroll still TC too? he should be up soon, lol06:30
AJaegeryes, he is.06:30
AJaegerLet's see what the rest of the team thinks as well...06:31
AJaegerso, I'll wait a few days before I vote.06:31
*** markvoelker has quit IRC06:31
rm_workkk06:40
*** jaosorior has joined #openstack-infra06:43
*** ociuhandu has joined #openstack-infra06:46
*** pgaxatte has joined #openstack-infra06:48
*** rcernin_ has quit IRC06:48
*** takamatsu has quit IRC06:50
*** ociuhandu has quit IRC06:51
*** psachin has quit IRC06:53
*** gfidente has joined #openstack-infra06:54
*** udesale has quit IRC06:57
*** udesale has joined #openstack-infra06:58
*** rpittau|afk is now known as rpittau07:05
*** xek has joined #openstack-infra07:05
*** slaweq has joined #openstack-infra07:08
*** armax has joined #openstack-infra07:11
*** apetrich has joined #openstack-infra07:15
*** rcosnita has joined #openstack-infra07:16
*** rcosnita has quit IRC07:16
*** e0ne has joined #openstack-infra07:17
*** kjackal has joined #openstack-infra07:18
*** udesale has quit IRC07:18
*** jamesmcarthur has joined #openstack-infra07:18
*** udesale has joined #openstack-infra07:19
*** slaweq has quit IRC07:20
*** xenos76 has joined #openstack-infra07:22
*** jamesmcarthur has quit IRC07:23
*** tosky has joined #openstack-infra07:23
*** tesseract has joined #openstack-infra07:26
*** jpena|off is now known as jpena07:33
*** slaweq has joined #openstack-infra07:33
*** armax has quit IRC07:37
*** xek has quit IRC07:38
*** ykarel is now known as ykarel|lunch07:38
*** xek has joined #openstack-infra07:40
*** roman_g has joined #openstack-infra07:42
*** takamatsu has joined #openstack-infra07:44
*** jaosorior has quit IRC07:51
openstackgerritAndreas Jaeger proposed openstack/openstack-zuul-jobs master: Fix upstream_translation_update  https://review.opendev.org/68304607:51
AJaegerconfig-core, please review to fix the upstream_translation jobs ^07:52
*** kaiokmo has quit IRC07:57
*** zbr is now known as zbr|ruck07:57
*** iurygregory has joined #openstack-infra08:00
*** kaiokmo has joined #openstack-infra08:02
*** soniya29 has quit IRC08:04
*** ildikov has joined #openstack-infra08:10
ildikovHi infra team08:11
ildikovwe have a merged review in StarlingX that didn't get rendered to the docs page: https://review.opendev.org/#/c/68185008:12
ildikovcan someone help me looking into where it got stuck in the post-processing phase?08:12
*** yamamoto has quit IRC08:13
AJaegerildikov: I'll check in a bit...08:14
*** dchen has quit IRC08:18
ttxAJaeger: I commented08:19
*** elod has quit IRC08:19
*** tkajinam has quit IRC08:19
ildikovAJaeger: thank you08:19
ttxwill bring it up to the TC too08:20
*** arxcruz|ruck is now known as arxcruz|rover08:20
*** ykarel|lunch is now known as ykarel08:21
*** lennyb has quit IRC08:21
*** elod has joined #openstack-infra08:24
*** soniya29 has joined #openstack-infra08:26
fricklerAJaeger: ildikov: seems the new docs get published to /afs/openstack.org/project/starlingx.io/www/docs/ , but content is served from /afs/openstack.org/project/starlingx.io/www08:27
*** markvoelker has joined #openstack-infra08:28
fricklerhere's the new content https://docs.starlingx.io/docs/developer_resources/navigate_source_code.html08:28
*** derekh has joined #openstack-infra08:30
*** zzzeek has quit IRC08:30
ildikovfrickler: hmm, there might be something with the build job?08:30
ildikovas the review touches an already existing page only08:31
*** zzzeek has joined #openstack-infra08:31
ildikovI'll check a little later08:31
*** dtantsur|afk is now known as dtantsur08:32
*** markvoelker has quit IRC08:33
*** lpetrut has joined #openstack-infra08:33
*** pgaxatte has quit IRC08:34
*** lennyb has joined #openstack-infra08:34
fricklerildikov: yes, that's an issue either with the build or promote job, but I'll defer that to AJaeger who know the details of those better than me08:35
*** kaiokmo has quit IRC08:36
*** kaiokmo has joined #openstack-infra08:37
AJaegerfrickler: Oh, thanks for debugging that - now I know what to fix08:37
*** lpetrut has quit IRC08:39
*** pgaxatte has joined #openstack-infra08:43
*** ociuhandu has joined #openstack-infra08:45
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add promote job for starlingx/docs  https://review.opendev.org/68305908:45
*** ociuhandu has quit IRC08:46
*** takamatsu_ has joined #openstack-infra08:46
*** takamatsu has quit IRC08:46
AJaegerildikov, frickler, part 1 of the fix ^08:46
*** xenos76 has quit IRC08:46
AJaegerpart 2 is https://review.opendev.org/68306108:47
*** ociuhandu has joined #openstack-infra08:47
AJaegerfrickler, could you +2 683046 , please?08:48
*** ociuhandu has quit IRC08:53
*** ociuhandu has joined #openstack-infra08:53
*** ociuhandu has quit IRC08:54
*** ociuhandu has joined #openstack-infra08:54
*** lpetrut has joined #openstack-infra09:05
*** yamamoto has joined #openstack-infra09:06
openstackgerritMerged openstack/openstack-zuul-jobs master: Fix upstream_translation_update  https://review.opendev.org/68304609:06
*** gfidente has quit IRC09:07
*** xenos76 has joined #openstack-infra09:08
*** gfidente has joined #openstack-infra09:10
*** iurygregory has quit IRC09:13
*** iurygregory has joined #openstack-infra09:14
*** takamatsu_ has quit IRC09:19
*** slaweq has quit IRC09:25
*** slaweq has joined #openstack-infra09:27
*** yamamoto has quit IRC09:32
*** takamatsu has joined #openstack-infra09:36
*** yamamoto has joined #openstack-infra09:38
openstackgerritIan Wienand proposed zuul/zuul master: Add a more conversational overview to README.rst  https://review.opendev.org/68308509:45
*** ociuhandu has quit IRC09:46
*** ociuhandu has joined #openstack-infra09:47
*** ociuhandu has quit IRC09:52
*** janki has quit IRC09:57
*** takamatsu has quit IRC10:00
*** udesale has quit IRC10:01
openstackgerritFabien Boucher proposed zuul/zuul master: Add reference pipelines file for Github driver  https://review.opendev.org/67271210:04
*** takamatsu has joined #openstack-infra10:06
*** yamamoto has quit IRC10:10
*** yamamoto has joined #openstack-infra10:12
*** ociuhandu has joined #openstack-infra10:15
*** rcernin_ has joined #openstack-infra10:15
*** ykarel is now known as ykarel|afk10:27
*** markvoelker has joined #openstack-infra10:29
*** kjackal has quit IRC10:31
*** udesale has joined #openstack-infra10:32
*** markvoelker has quit IRC10:34
*** trident has quit IRC10:35
*** rcernin_ has quit IRC10:36
*** udesale has quit IRC10:37
*** udesale has joined #openstack-infra10:37
ildikovAJaeger: thank you!10:41
ildikovAJaeger: I assume the changes were needed as it's a different path than the original templates?10:42
*** e0ne has quit IRC10:42
ildikovI just wonder how it worked until now as they have docs published10:43
ildikovsorry for disappearing so long, I'm at a conference and had some duties to take care of10:43
AJaegerildikov: correct, those are different paths10:44
AJaegerildikov: I recently changed the publishing job to promote jobs and missed that the docs repo publishes to "/" instead of "/docs" :(10:44
*** trident has joined #openstack-infra10:48
ildikovAJaeger: ah ok, no worries10:51
ildikovAJaeger: I just wanted to understand if we missed something or keep a closer eye or items, etc10:52
ildikovAJaeger: thanks for the quick fix10:52
*** pcaruana has quit IRC10:54
*** rpittau is now known as rpittau|afk10:56
*** takamatsu has quit IRC11:00
*** udesale has quit IRC11:01
*** jpena is now known as jpena|lunch11:04
dtantsurfolks, I remember asking, but I apparently forgot the answer: is it a known problem? http://paste.openstack.org/show/777692/11:06
dtantsurit seems to affect the ironic CI11:06
*** takamatsu has joined #openstack-infra11:06
fricklerdtantsur: to me this looks like neutron may be messing up IPv6 connectivity to the test node, causing zuul to lose the connection. does this happen 100% or only sometimes, possibly related to certain cloud providers?11:11
dtantsurfrickler: only sometimes11:11
dtantsurthis one was https://storage.gra1.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_650/682647/3/check/ironic-standalone-ipa-src/65091a8/job-output.txt11:12
*** yamamoto has quit IRC11:13
*** pcaruana has joined #openstack-infra11:17
*** yamamoto has joined #openstack-infra11:17
fricklerdtantsur: so this is fortnebula, one of the providers where we access nodes via v6, so that would match my hypothesis. you may want to crosscheck this with other failures that you see. it will be difficult to debug this, though. best probably would be to try to reproduce with a local instance where you can verify v6 connectivity during the run11:17
*** e0ne has joined #openstack-infra11:21
*** takamatsu has quit IRC11:22
*** n-saito has joined #openstack-infra11:24
*** n-saito has left #openstack-infra11:25
*** gfidente has quit IRC11:28
*** takamatsu has joined #openstack-infra11:28
*** lucasagomes has joined #openstack-infra11:33
jrollrm_work: fun :)11:33
*** yamamoto has quit IRC11:42
*** gfidente has joined #openstack-infra11:43
*** yamamoto has joined #openstack-infra11:46
*** rh-jelabarre has joined #openstack-infra11:54
*** yamamoto has quit IRC11:57
*** yamamoto has joined #openstack-infra12:00
*** ykarel|afk is now known as ykarel12:02
openstackgerritAndreas Jaeger proposed openstack/project-config master: Add promote job for starlingx/docs  https://review.opendev.org/68305912:04
*** rfolco has joined #openstack-infra12:04
AJaegerfrickler: thanks for review ^12:05
*** ricolin has quit IRC12:06
*** Goneri has joined #openstack-infra12:07
*** goldyfruit_ has quit IRC12:11
*** markvoelker has joined #openstack-infra12:13
*** jamesmcarthur has joined #openstack-infra12:18
openstackgerritMonty Taylor proposed opendev/system-config master: Remove bazel version hack  https://review.opendev.org/68246912:18
openstackgerritMonty Taylor proposed opendev/system-config master: Install jeepyb into the gerrit images  https://review.opendev.org/68260112:18
openstackgerritMonty Taylor proposed opendev/system-config master: Expose volumes for the gerrit hooks and static dirs  https://review.opendev.org/67887512:18
openstackgerritMonty Taylor proposed opendev/system-config master: Run a gerrit container (test only)  https://review.opendev.org/63040612:18
openstackgerritMonty Taylor proposed opendev/system-config master: Fix gerrit java invocation  https://review.opendev.org/68312412:18
openstackgerritMonty Taylor proposed opendev/system-config master: Add admin users to docker group  https://review.opendev.org/68312512:19
*** takamatsu has quit IRC12:21
*** jpena|lunch is now known as jpena12:23
*** aaronsheffield has joined #openstack-infra12:25
*** takamatsu has joined #openstack-infra12:27
*** ociuhandu has quit IRC12:27
*** lbragstad has quit IRC12:29
*** lbragstad has joined #openstack-infra12:30
*** jamesmcarthur has quit IRC12:30
*** jamesmcarthur has joined #openstack-infra12:30
*** eandersson has quit IRC12:31
mordredinfra-root: I'm manually doing things on review-dev12:31
*** rlandy has joined #openstack-infra12:31
*** yamamoto has quit IRC12:33
mordred(I have put it into the emergency file - but still, thought I'd let you know)12:34
fungithanks for the heads-up12:34
mordredalso - review-dev is currently successfully running gerrit 2.13 from our docker container of 2.1312:35
*** jamesmcarthur has quit IRC12:36
*** ociuhandu has joined #openstack-infra12:36
*** priteau has joined #openstack-infra12:36
*** takamatsu has quit IRC12:38
openstackgerritMonty Taylor proposed opendev/system-config master: Run a gerrit container (test only)  https://review.opendev.org/63040612:38
fungiclarkb: thanks for the reminder on the reprepro problem, i had gotten as far as wondering if it was writing the new package indices to a different/wrong path since it's not for weeks so much as touched the ones our nodes hit even though it's been updating the packages in the pool12:38
*** ociuhandu has quit IRC12:40
*** ociuhandu has joined #openstack-infra12:41
openstackgerritMonty Taylor proposed opendev/system-config master: Add admin users to docker group  https://review.opendev.org/68312512:41
mordredfungi: uhm. https://review.opendev.org/#/c/682601/4 <-- zuul seems real unhappy - am I missing something there?12:43
mordredor did I just get unlucky?12:43
dtantsurfrickler: is it possible to stop running ironic jobs on fortnebula? it seems to have become a real problem.12:44
dtantsur(I wonder why neutron doesn't suffer from it)12:45
dtantsuralthough.. we see so many other random failures that it may not even help12:46
*** markvoelker has quit IRC12:46
*** fdegir has quit IRC12:47
*** fdegir has joined #openstack-infra12:48
*** lpetrut has quit IRC12:48
fungimordred: i haven't looked closely yet, but maybe we need to add those projects to the openhdev tenant?12:50
fungia lot of the opendev namespace projects are still i the openstack tenant in zuul12:50
mordredfungi: I *think* I just got unlucky and zuul was in the middle of a reconfig or something - I rechecked and they seem to be better12:51
mordredfungi: (the patches worked in previous iterations and are in the openstack tenant)12:51
fungiahh, okay12:51
mordredoh! nope, nevermind. I lied - I rechecked and still unhappy12:51
mordredfungi: is opendev/system-config in the opendev tenant now?12:52
mordredOH - I get what's happening12:53
mordredsystem-config is in both, and it's importing jobs into the opendev tenant - but jeepyb isn't in the opendev tenant, so the job import is unhappy - while in the openstack tenant everything is there so things are happy12:54
*** ociuhandu has quit IRC12:55
*** ociuhandu has joined #openstack-infra12:55
*** zzzeek has quit IRC12:56
sshnaidmis there a way to see gzipped site like that? https://openstack.fortnebula.com:13808/v1/AUTH_e8fd161dc34c421a979a9e6421f823e9/zuul_opendev_logs_de8/682527/2/check/tripleo-ci-centos-7-containers-multinode/de865c2/logs/ara_oooq_oc/12:57
sshnaidmI remember it worked once12:58
*** zzzeek has joined #openstack-infra12:58
openstackgerritMonty Taylor proposed openstack/project-config master: Add repos to opendev tenant for system-config jobs  https://review.opendev.org/68314612:59
*** ociuhandu has quit IRC13:00
*** ociuhandu has joined #openstack-infra13:01
donnyddtantsur: What iss are you having with FN13:02
mordredfungi, AJaeger: ^^ that's related to https://review.opendev.org/#/c/682755/ which recently landed which added system-config to the opendev tenant but didn't quite pull in enough things for required-projects to be happy13:03
dtantsurdonnyd: it's just a guess, but we're seeing http://paste.openstack.org/show/777692/13:04
*** whoami-rajat has joined #openstack-infra13:04
*** slaweq has quit IRC13:07
donnydSo looking through the logs using node_provider:"fortnebula-regionone" AND filename:job-output.txt AND message:"Upload logs to swift" AND build_status:"FAILURE"13:08
donnydhttp://logstash.openstack.org/#/dashboard/file/logstash.json13:08
donnydAnd then looking at node_provider:"fortnebula-regionone" AND filename:job-output.txt AND message:"Upload logs to swift" AND build_status:"SUCCESS"13:11
donnydYou can see there are some jobs that pass and some that don't13:11
donnydCould be because of ipv613:11
donnydbut I am happy to take a deeper look into your issue13:11
*** ociuhandu has quit IRC13:12
donnydcould it be that you are setting def route's in the job for ipv6?13:12
*** eharney has joined #openstack-infra13:12
donnydIt would seem that when you create the public side of your networking, its overridding the real ipv6 routes. In other providers you don't have to worry about it because they come inbound on v4. FN is the opposite13:13
*** dtantsur is now known as dtantsur|bbl13:14
donnydBut I see the same job run fine other times13:15
donnyd2019-09-19 12:31:41.094258 | controller | +++ lib/neutron_plugins/services/l3:_neutron_create_public_subnet_v6:330 :   oscwrap --os-cloud devstack-admin --os-region RegionOne subnet create --ip-version 6 --gateway 2001:db8::2 --network 13b55f13-0625-434f-8c7e-20dd23e08d87 --subnet-range 2001:db8::/64 --no-dhcp ipv6-public-subnet13:15
donnydhttps://4c15fff3fe75ce2ac3df-05cf8d45f98e4972de234be1a80e25da.ssl.cf1.rackcdn.com/674496/5/check/ironic-tempest-ipa-wholedisk-bios-agent_ipmitool-tinyipa/50c2591/job-output.txt13:16
donnyddtantsur|bbl: ^^^^13:16
*** takamatsu has joined #openstack-infra13:16
*** yamamoto has joined #openstack-infra13:16
*** goldyfruit_ has joined #openstack-infra13:16
donnydalso could you share what job that paste run in?13:16
*** armax has joined #openstack-infra13:17
*** yamamoto_ has joined #openstack-infra13:17
openstackgerritMonty Taylor proposed opendev/system-config master: Install jeepyb into the gerrit images  https://review.opendev.org/68260113:17
openstackgerritMonty Taylor proposed opendev/system-config master: Expose volumes for the gerrit hooks and static dirs  https://review.opendev.org/67887513:17
openstackgerritMonty Taylor proposed opendev/system-config master: Run a gerrit container (test only)  https://review.opendev.org/63040613:17
mordredfungi: added the depends-on13:17
*** jaosorior has joined #openstack-infra13:18
openstackgerritAndreas Jaeger proposed openstack/project-config master: Remove unused stx docs publish job  https://review.opendev.org/68315413:21
*** yamamoto has quit IRC13:21
*** udesale has joined #openstack-infra13:23
*** udesale has quit IRC13:24
AJaegermordred: could you +2A https://review.opendev.org/683059 , please?13:24
*** yamamoto_ has quit IRC13:24
*** udesale has joined #openstack-infra13:25
pabelangerso, in fedora images, do we do anything to /tmp to make it larger then 512MB?13:27
*** pcaruana has quit IRC13:28
mordredpabelanger: jeez, why would it be 512M?13:29
*** derekh has quit IRC13:29
pabelangerunknown right now13:29
pabelangerthis is zuul.a.c, wanted to check with opendev to see13:29
pabelangerbut pip install is like taking up almost 500mb in some cases13:29
pabelangerwhich, seems to use /tmp for storage13:29
*** mriedem has joined #openstack-infra13:30
pabelangermordred: Oh, default is 1/2 the size of ram, which these instances are 1GB13:32
openstackgerritMerged openstack/project-config master: Add repos to opendev tenant for system-config jobs  https://review.opendev.org/68314613:32
*** jamesmcarthur has joined #openstack-infra13:36
*** jamesmcarthur has quit IRC13:36
fricklerdonnyd: what ipv6 addr mode do you use for FN? RA or dhcpv6?13:36
*** jamesmcarthur has joined #openstack-infra13:36
openstackgerritMerged openstack/project-config master: Add promote job for starlingx/docs  https://review.opendev.org/68305913:38
*** ociuhandu has joined #openstack-infra13:38
fricklerI think the critical code is this one, so it seems it should affect neutron jobs, too. will take the discussion to #-neutron13:38
fricklerhttps://opendev.org/openstack/devstack/src/branch/master/lib/neutron_plugins/services/l3#L398-L41113:38
donnydfrickler: I use DHCPv6-stateless -Address configuration using RA and optional information using DHCPv6.13:39
donnydSame as how limestone is setup13:39
*** ociuhandu has quit IRC13:40
*** ociuhandu has joined #openstack-infra13:41
fricklerdonnyd: o.k., I'm going to repeat my test with that. it certainly breaks with dhcpv6-stateful, but likely with any configuration13:42
mordredpabelanger: ah - the old "mount a tmpfs on /tmp" trick13:43
*** yamamoto has joined #openstack-infra13:43
donnydfrickler: I can also increase the timeouts on my edge FW to allow them to stay open a little longer13:43
donnydIf the issue is only FN and in IPv6... then it could possibly be that the state is being dropped13:44
*** gfidente has quit IRC13:45
pabelangermordred: systemctl mask tmp.mount13:45
pabelangershould be myfix13:45
pabelangerbut yah13:45
donnydWe have been making adjustments to the edge FW because we were previsouly using it for NAT to the mirror because of a retransmit issue.  (dropped packets). This was isolated down to an MTU issue which has since been solved13:46
fricklerdonnyd: one thing that may help would be sending RAs more often. is that configurable on your edge router? or is it an openstack router?13:47
*** ociuhandu has quit IRC13:47
donnydSo I can make thing a little more conservative on the edge (where ssh from zuul comes inbound), because we don't have to worry about expiring connections fast enough to keep up with the NAT churn anymore13:47
donnydWell the RA's are all done on Openstack13:47
donnydNot sure if that value is configurable.. but if it is I am happy to change it13:48
openstackgerritMonty Taylor proposed opendev/system-config master: Expose volumes for the gerrit hooks, tmp static dirs  https://review.opendev.org/67887513:53
openstackgerritMonty Taylor proposed opendev/system-config master: Run a gerrit container (test only)  https://review.opendev.org/63040613:53
*** armax has quit IRC13:54
*** pcaruana has joined #openstack-infra13:54
*** zhangfei has joined #openstack-infra13:56
donnydWe moved the outbound NAT for v4 connections to an Openstack router a little while back13:56
*** efried_pto is now known as efried13:56
fungimordred: whack-a-mole time... 682601 still needs more, but at least the zuul errors are different now13:58
*** derekh has joined #openstack-infra13:58
mordredfungi: yay!13:58
openstackgerritMonty Taylor proposed opendev/system-config master: Expose volumes for the gerrit hooks, static and tmp dirs  https://review.opendev.org/67887513:58
openstackgerritMonty Taylor proposed opendev/system-config master: Run a gerrit container (test only)  https://review.opendev.org/63040613:58
*** kjackal has joined #openstack-infra14:00
*** tesseract has quit IRC14:00
openstackgerritMonty Taylor proposed openstack/project-config master: Add additional repos need for system-config  https://review.opendev.org/68316714:01
mordredfungi, AJaeger: whackamole!14:01
AJaeger;(14:03
*** soniya29 has quit IRC14:04
*** ociuhandu has joined #openstack-infra14:06
*** ociuhandu has quit IRC14:06
*** ociuhandu has joined #openstack-infra14:07
*** ociuhandu has quit IRC14:12
*** ykarel is now known as ykarel|afk14:13
*** goldyfruit___ has joined #openstack-infra14:15
*** takamatsu has quit IRC14:16
*** goldyfruit_ has quit IRC14:18
TheJuliamordred: I _think_ two of our 3rd party CIs are v3 based. One I believe is presently offline due to silly human issues14:18
*** ykarel|afk is now known as ykarel|away14:22
*** gfidente has joined #openstack-infra14:23
mordredTheJulia: silly humans14:24
*** xenos76 has quit IRC14:25
*** e0ne has quit IRC14:28
fungiTheJulia: other third-party ci operators might appreciate input/guidance from your ci operators on what was involved in switching from zuul v2 to v3 (assuming they weren't green-field)14:30
TheJuliaI know one was greenfielded, the other I'm unsure off-hand14:31
TheJuliadefinitely worth raising though14:31
fungimy only experience in moving from v2 to v3 is opendev, and involved an experimental transitional v2.5 release along with a very lengthy period of eliminating non-essential jenkins plugins, and also doing it while v3 was still somewhat under development, so probably not as applicable to the third-party ci crowd14:32
openstackgerritMerged openstack/project-config master: Add additional repos need for system-config  https://review.opendev.org/68316714:32
*** xenos76 has joined #openstack-infra14:33
*** pcaruana has quit IRC14:33
*** ociuhandu has joined #openstack-infra14:34
*** michael-beaver has joined #openstack-infra14:35
*** mmedvede has quit IRC14:36
*** ociuhandu has quit IRC14:36
openstackgerritJeremy Freudberg proposed opendev/irc-meetings master: Reduce frequency of Sahara team meeting  https://review.opendev.org/68317114:36
*** ociuhandu has joined #openstack-infra14:37
mordredfungi: also - we used the semi-functional migration script I assaulted the world with - which we do not recommend anyone else do14:38
fungiyeah, mechanical translation of jeepyb configuration into zuul v3 "legacy" jobs14:38
*** ociuhandu has quit IRC14:39
*** ociuhandu has joined #openstack-infra14:39
fungithe path we took was influenced both by being tightly coupled to zuul's development process, and also having to deal with migrating something like 10k jobs14:40
pabelangerFWIW: zuul-migrate works well on single use jobs. Multi-node, you need to rewrite from scratch14:40
pabelangers/use/node14:41
fungibut also, for a small deployment with few users and a handful of jobs, setting up a new zuul deployment and rewriting those jobs is likely easier14:41
*** ykarel|away has quit IRC14:41
fungiespecially if they're based off jobs maintained in the openstack job set which have already mostly been rewritten14:41
*** ociuhandu has quit IRC14:45
*** iurygregory has quit IRC14:46
*** iurygregory has joined #openstack-infra14:47
*** sthussey has joined #openstack-infra14:49
*** dtantsur|bbl is now known as dtantsur14:54
dtantsurdonnyd: one of examples https://storage.gra1.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_650/682647/3/check/ironic-standalone-ipa-src/65091a8/job-output.txt14:55
dtantsurthanks for looking into it14:55
donnydI am thinking frickler figured it out https://review.opendev.org/#/c/683166/14:56
*** gyee has joined #openstack-infra14:56
*** tosky has quit IRC14:57
*** efried is now known as efried_pto14:57
*** tosky has joined #openstack-infra14:58
*** yamamoto has quit IRC14:59
clarkbjohnsom: ^ fyi that likely explains dns problems too14:59
openstackgerritDavid Shrewsbury proposed zuul/nodepool master: WIP: Do not overwrite image upload zk data on delete  https://review.opendev.org/68185714:59
fungicorvus: oh, hey! one of the "openstOck users list" spams just showed up in the foundation ml moderation queue, so i can no longer claim not to have seen one ;)15:00
johnsomclarkb Cool!15:00
*** ociuhandu has joined #openstack-infra15:02
*** e0ne has joined #openstack-infra15:02
*** ociuhandu has quit IRC15:02
clarkbfrickler: thank you for tracking that down. I had been pushing towards that for a while now because the network was alays going down right around when neutron was starting up according to the job logs that johnsom had but no on was able to figure it out15:02
*** ociuhandu has joined #openstack-infra15:03
*** slaweq has joined #openstack-infra15:03
clarkbslaweq: ^ fyi https://review.opendev.org/#/c/683166/ appears to maybe be the fix for networking in tempest jobs on ipv6 only clouds. Thi was something I had asked you to debug previously with octavia having dns issues right around when neutron was started15:04
*** yamamoto has joined #openstack-infra15:05
fricklerclarkb: the trick seems to have been that the "bad" sysctl didn't even make it into the log, because it is probably buffered, so the logs ends a handful of lines early15:05
mordredclarkb, corvus: is this: https://zuul.opendev.org/t/openstack/build/b1fdbfd2e79c499eb9b7ca66a5cf0fb0 a symptom of the zero-byte in swift registry issue15:05
clarkbmordred: yes that sha256sum is for an empty file15:06
clarkb(thats the trick for identifying the issue, the sha256sum is the same for a no byte file)15:07
corvusmordred: yes; it's easy to confirm because it says it received the sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 which is the sha256sum of the empty string (you can check that with "echo -n ''|sha256sum")15:07
mordredah - cool15:07
mordredso - when we have confirmed that - is there a process to remediate?15:07
corvusmordred: does this change depend on another with an image build, or is it the head of the queue?15:08
mordredit depends on another with an image build15:08
mordredshoudl we just land that image?15:08
corvusmordred: yes, this change will no longer work until the change ahead is out of the picture in some way; so we need to land the change ahead, or push up a new patchset for it or something.15:09
mordredkk. well - https://review.opendev.org/#/c/683124/1 is the change ahead of it - and it's good to go15:10
*** yamamoto has quit IRC15:10
corvusmordred: why run daemon?15:10
mordredthat's the subcommand that gerrit.sh would be running, I think? is there a better subcommand?15:10
clarkbmordred: does gerrit have a run in foreground option? typically that works better with docker due to grabbing stdout and stderror15:11
mordredlooking15:11
fungii suspect this gets a bit wacky due to the onion layers of processes in jvm in container15:13
mordredclarkb: no - daemon is the command15:13
mordredhttp://paste.openstack.org/show/777703/15:14
fungithe jar/war is already sort of a container image, and the jvm is already a sort of container15:14
clarkbmordred: I agree daemon appears to be the thing. corvus ^15:14
mordredclarkb: fwiw - running the java command with daemon works happily15:14
clarkbfungi: the jvm should look like nay other process to docker though. I don't expect it will cause problems15:15
corvusclarkb, mordred: yes, even if you give gerrit.sh an arg of "run" it calls15:15
corvusRUN_ARGS="-jar $GERRIT_WAR daemon -d $GERRIT_SITE"15:15
mordredyah15:15
clarkbI didn't approve in order to give corvus a chance to review15:16
corvus+315:16
mordredcool15:16
mordreddon't know if y15:16
corvusi suspect that this will still run it in the foreground15:16
*** derekh has quit IRC15:16
mordredy'all caught in scrollback - but review-dev is now running from the container image (albeit with an overridden run line)15:16
corvusgerrit.sh sticks a "&" after it15:16
clarkbcorvus: aha15:16
corvusmordred: \o/15:17
mordredyeah - I thnik "daemon" here is not "daemonize" but "start the daemon that listens on the network"15:17
corvuswords are hard15:17
fungiclarkb: yeah, just noting that i'm not sure if it's possible to expose the stddin/stdout/stderr of the actual gerrit process(es) through the jvm layer, which means maybe it's less important whether the jvm's stdin/stdout/stderr are disassociated and the wrapper backgrounded since it's not going to be following a real "containery" paradigm anyway?15:18
mordredcorvus: I learned a few things in the process - like we can't install docker-compose from apt packages because we have installed jeepyb with pip15:18
*** derekh has joined #openstack-infra15:18
mordredI think we can get to a place where we do not need to install jeepyb globally on the gerrit servers - but that'll take a minute to unwind15:18
clarkbfungi: it should expose the std* of the jvm process (which is the only linux process gerrit is running in)15:18
clarkbmordred: note you can install docker-compose from pypi15:19
fungiclarkb: sure, but that doesn't get us gerrit logging to stdout/stderr though right?15:19
mordredclarkb: yes. that is the solution in this case15:19
clarkbfungi: its been a while since I ran gerrit in the foreground. I seem to recall it does write some stuff to stdout/stderr but maybe not with a proper config15:19
mordredinstalling from apt produces some really excellent openssl library mismatch errors, because python grabs some bits from /usr/local and some bits from /usr and they are not happy with each other15:20
fungithat's a good point though, it does at least write its logfiles outside the jvm storage, so it's presumably exposed somehow15:20
*** ricolin has joined #openstack-infra15:21
mordredyeah - there is an option to log to the console - so presumably we could use that and then we'd have logs in the docker logs location ...15:22
mordredbut given we're already trained to look for logs in /home/gerrit2/review_site/logs  - I'm not sure that's a big win at the moment15:22
corvusmordred: did i see a patch to install jeepyb in the container?  did that land?  is it both in and out of the container?  or is it only out and you bind-mount stuff in?15:24
mordredcorvus: yes - you did. and it's both in and out of the container at the moment15:24
corvuscool, gtk15:24
mordredit's needed in the container because of the hook scripts15:24
mordredbut it's needed outside of the container because of manage-projects15:25
fungiif it's https://review.opendev.org/682601 it has not merged yet15:25
fungiit's past complaining about missing repos though15:25
mordredwe could, of course, rework our usage of jeepyb outside of the container to just use the container to execut jeepyb scripts15:25
fungiand on to actual job failures15:25
openstackgerritKerby proposed zuul/nodepool master: AWS driver: add ability to determine AMI id using filters  https://review.opendev.org/68318315:25
mordredbut I think we should step our way to that :)15:25
mordredI also learned that we need the gerrit tmp dir to exist in the container - because loading plugins expands them :)15:28
zbr|ruckanyone aware of limestone mirror issues? (pip): https://d3f814c2cb98e7325b60-dc7b8fac10688d132d58a9050206c3ae.ssl.cf2.rackcdn.com/682385/1/gate/tripleo-ci-centos-7-undercloud-containers/3f5c9c4/job-output.txt15:30
mnasermirror.regionone.limestone.openstack.org looks like it sfine15:33
mnaserbut maybe network issues15:33
mnasercc logan-15:33
clarkbzbr|ruck: mnaser logan- the mirror itself is up (if you hit / its happy) the /pypi/simple path is indeed timing out and that is a caching proxy path to pypi proper15:35
clarkbwget pypi.org seems to be failing from that host15:35
clarkbConnecting to pypi.org (pypi.org)|2a04:4e42:400::223|:80 and it is just sitting there15:35
*** gfidente has quit IRC15:35
*** pgaxatte has quit IRC15:35
clarkbso either a pypi outage or a network outage15:35
*** kopecmartin is now known as kopecmartin|off15:35
clarkbI am able to wget google.com over ipv6 fwiw15:36
fungilikely a problem with the local fastly cdn endpoint it's being directed to15:39
openstackgerritwes hayutin proposed opendev/elastic-recheck master: add query for bindep pip install failures  https://review.opendev.org/68318815:39
openstackgerritwes hayutin proposed opendev/elastic-recheck master: add query for bindep pip install failures  https://review.opendev.org/68318815:39
clarkbfungi: ya I'm able to wget from pypi via ovh ipv6 in canada15:39
*** zhangfei has quit IRC15:39
clarkbusing the same IP in limestone fails15:39
clarkblikely is a region cdn or network problem15:40
*** weshay_ has joined #openstack-infra15:40
slaweqclarkb: thx, I will look at it later today15:43
openstackgerritMerged openstack/project-config master: Add zuul-registry project  https://review.opendev.org/68274315:43
*** ykarel|away has joined #openstack-infra15:46
fungiclarkb: yeah, could be bgp trouble impacting specific routes/peering points15:47
*** Goneri has quit IRC15:47
openstackgerritDavid Shrewsbury proposed zuul/nodepool master: Do not overwrite image upload ZK data on delete  https://review.opendev.org/68185715:53
paladoxmordred: are you using gerrit.sh to start?15:53
paladoxAnd using systemd with the script?15:54
clarkbpaladox: on current production we are15:54
clarkbpaladox: the docker images invoke the war directly as the docker image command15:54
*** ykarel|away has quit IRC15:54
paladoxAh!15:54
paladoxYeh, we migrated to using the war directly when we moved towards the scap deploy15:54
mordredpaladox: yah. it doesn't seem to make much sense to run a script around the war inside of the container image15:56
*** jklare has quit IRC15:56
paladoxYup15:57
mordredor, at least, not in our context - I think it does for the general purpose images that are being made, since those don't assume any surrounding orchestration and the script can make sure the things ahve been done and whatnot15:57
*** mgoddard has quit IRC15:58
zbr|ruckweshay_: ^15:58
*** jklare has joined #openstack-infra15:59
logan-clarkb zbr|ruck mnaser ack. looking into it.15:59
donnydhttps://www.irccloud.com/pastebin/b6OP1R9s/15:59
donnydclarkb: I have no issue from here15:59
*** mgoddard has joined #openstack-infra15:59
zbr|ruckyeah, works-for-me too locally, but the builds are not happening on my localhost ;)16:00
zbr|rucki remember seeing similar issue in the past, not sure if was limestone something else, but it was pypi, same kind of issue.16:01
clarkbpypi is hosted with fastly cdn and they have endpoints around the world including DFW which is where limestone is hosted. I presume that it is going to be specific to the routes or cdn hosts there16:01
clarkbhttps://status.python.org/ claims they are all operational though16:02
openstackgerritDavid Shrewsbury proposed zuul/nodepool master: Do not overwrite image upload ZK data on delete  https://review.opendev.org/68185716:03
openstackgerritMerged opendev/system-config master: Fix gerrit java invocation  https://review.opendev.org/68312416:05
corvusmordred: ^16:05
*** openstackgerrit has quit IRC16:06
*** takamatsu has joined #openstack-infra16:06
mordred\o/16:06
*** iurygregory has quit IRC16:08
*** kjackal has quit IRC16:09
*** jamesmcarthur has quit IRC16:12
*** e0ne has quit IRC16:14
clarkbas a sanity check ipv4 does work to wget pypi from the limestone mirror16:14
clarkbassuming that ends up at the same cdn endpoint as v6 the cdn itself is probably fine and instead we have networking problems?16:15
*** markvoelker has joined #openstack-infra16:15
*** mriedem is now known as mriedem_afk16:15
clarkbrax's DFW mirror can hit pypi over ipv6 too16:17
clarkb(not sure if that helps isloate it at all)16:17
*** ykarel|away has joined #openstack-infra16:18
logan-what i'm seeing from our dfw smokeping towards the mirror this morning: https://i.imgur.com/BGjTgRz.jpg (ping) vs https://i.imgur.com/XsJTj6Y.jpg (http), so yes i agree, not external, it seems like something internal to the nodepool cluster's neutron env. i'm disabling the nodepool host aggregate temporarily so we at least don't spawn more jobs in there while debugging.16:18
clarkblogan-: fwiw google ipv6 worked from there so wasn't a global ipv6 outage16:18
clarkb(also a global ipv6 outage in the region would prevent nodepool and zuul from sshing in and no jobs would run there)16:19
clarkbof cource that probably means it will be more difficult to debug :)16:19
*** kjackal has joined #openstack-infra16:20
*** jamesmcarthur has joined #openstack-infra16:21
logan-yeah i'm curious to see if it will persist after the load is drained16:21
logan-its similar to some breakage i've seen in the past, and it usually does seem to persist regardless of cluster usage until i reboot the network nodes :/16:22
*** dtantsur is now known as dtantsur|afk16:22
*** weshay_ is now known as weshay16:23
fungilogan-: also it can't reach us.archive.ubuntu.com (2001:67c:1562::16)16:24
fungipresumably the same issue16:25
*** kjackal has quit IRC16:25
*** kjackal_v2 has joined #openstack-infra16:26
*** udesale has quit IRC16:27
*** udesale has joined #openstack-infra16:28
*** Goneri has joined #openstack-infra16:29
zbr|rucki guess we kinda need some kinda of active monitoring on networking for each region16:30
logan-fungi: thanks, confirmed on a test instance instance. www.google.com (2607:f8b0:4000:808::2004) works, but the ubuntu archive IP doesn't even reach our switch :( i'll do some tracing through the neutron vxlan bridges and see if i can figure out where it is dropping16:32
donnydzbr|ruck: maybe checkout skydive16:33
donnydits does these types of things pretty well16:33
*** mattw4 has joined #openstack-infra16:34
fungizbr|ruck: it would likely have to be somewhat involved to catch problems like this one which only result in trouble reaching some destinations and not others16:34
zbr|ruckdonnyd: looks cool, as long you are not proposing me to build one i am ok. i seen too much stuff done in-house ;)16:34
logan-fungi: out of curiosity, do you see any globally addressable ipv6 addresses on mirror that are not in 2607:ff68::/32?16:36
donnydI have it functional at FN, and so long as you have access you can trace paths all the way through the SDN16:36
logan-fungi: somehow these two mysterious addresses have appeared on my test node http://paste.openstack.org/raw/777717/16:36
fungilogan-: yep, http://paste.openstack.org/show/777718/16:38
fungithey're all eui64 addresses16:39
*** mattw4 has quit IRC16:39
*** mattw4 has joined #openstack-infra16:39
fungifor different prefixes16:39
fungido you have route announcements leaking?16:40
fungibetween networks16:40
logan-i suspect those are coming from other nodepool instances16:40
*** ociuhandu has quit IRC16:40
fungioh, ouch16:40
*** dciabrin has quit IRC16:41
funginodepool instances spilling route announcements into the shared layer 2 segment?16:41
fungifrom jobs setting up v6 routers on nodes maybe16:41
*** Goneri has quit IRC16:41
logan-yep, that's my first guess. i think we could probably tie the gateway nexthops in ip -6 route to instances and confirm it.16:42
*** jamesmcarthur has quit IRC16:42
*** jamesmcarthur has joined #openstack-infra16:43
*** igordc has joined #openstack-infra16:44
*** e0ne has joined #openstack-infra16:45
donnydoo I wonder if that effects FN as well16:48
donnydNever really looked16:48
fungilogan-: no dice, only default has a via: http://paste.openstack.org/show/777720/16:48
logan-i see 5: http://paste.openstack.org/raw/777722/16:51
logan-on my test instance16:51
logan-identified 1 as one of the neutron router ports, workign to identify the remaining ones now16:51
*** udesale has quit IRC16:52
donnydcan it hurt to drop outbound RA's in the sec group?16:53
clarkbdonnyd: you can't blacklist traffic in the security groups so that might be painful to keep an otherwise open rulsset16:53
clarkb(though that may be necessary to fix this)16:54
donnydI would only worry that it would effect multi-node jobs16:54
clarkbmultinode jobs should carry all that traffic on a test specific overlay (in part because providers drop random traffic necessary to test that and also becuse some cloud don't have ipv6)16:55
donnydyea that is true16:55
logan-no hits in neutron.ports.mac_address sql column.. but it looks like ports are hard deleted from that table afaict. i wonder if there's historical port information somewhere.16:57
*** openstackgerrit has joined #openstack-infra16:59
openstackgerritKerby proposed zuul/nodepool master: AWS driver: add ability to determine AMI id using filters  https://review.opendev.org/68320516:59
*** kjackal_v2 has quit IRC17:00
*** pcaruana has joined #openstack-infra17:01
*** markvoelker has quit IRC17:01
*** Goneri has joined #openstack-infra17:01
fungilogan-: if we're not currently running jobs there, we could reboot the mirror and see if those routes reappear. also see if it suddenly starts being able to reach things it previously couldn't (though that seems unlikely)17:03
clarkbfungi: I like that idea17:04
logan-since you're not seeing the routes, only the unroutable addresses, maybe you could just ip -6 addr del them17:04
*** markvoelker has joined #openstack-infra17:04
fungisure, that's worth a try, just a sec17:04
*** zbr|ruck is now known as zbr17:07
fungiRTNETLINK answers: Cannot assign requested address17:08
logan-mysqldump --opt --all-databases | grep -i 'FA:16:3E:16:9A:9A' yields no results. no hits in logstash either. the host facts that zuul collects for each node in zuul-info/host-info*.yml of each job stores the mac address, but it looks like that is not indexed in logstash and not searchable17:08
fungithat's confusing17:08
fungii'm not trying to assign any address, only delete17:08
fungithat's when trying to `sudo ip ad del 2003::f816:3eff:febd:b93 dev ens3`17:09
logan-i think you'll need the cidr on the end to scope it properly17:09
fungiahh17:10
logan-going to try searching through systemd journals for hits on these macs17:10
fungialso worth skimming http://codesearch.openstack.org/?q=2003%3A%3A17:10
fungiseems we use 2003:: as a test network prefix in a few scenarios17:10
logan-++ good idea17:11
fungilogan-: you're right, adding the /64 solved it17:11
fungisurprising that it wants the mask when deleting, i would have thought non-linklocal addresses would be sufficiently unique that it wouldn't expect the same address with multiple masks17:12
clarkbFA:16:3E appears to be an unassigned prefix?17:12
clarkbin which case would be likely to come from not real interface managed by eg neutron?17:13
*** Goneri has quit IRC17:14
*** pcaruana has quit IRC17:14
fungioh, you mean not in the oui list17:14
clarkbya17:14
*** ociuhandu has joined #openstack-infra17:16
*** ociuhandu has quit IRC17:16
clarkbI can get pypi.org now17:17
fungiinteresting17:17
fungiyeah, it's going to 2a04:4e42:400::22317:17
clarkbwhat could be happening is that we originate the connection from the bad RA'd ip which then routes through the default route but has no route back to use17:17
clarkbs/use/us/17:17
clarkbso the default route being set or not doesn't really matter17:18
fungithat's the same address it was getting directed to before, for the record17:18
fungii concur, i think the server expected any of its three global scope addresses should be usable and was picking one to source the connection from17:19
*** jcoufal has joined #openstack-infra17:21
*** ralonsoh has quit IRC17:21
logan-rp_filter should be dropping it at the neutron router17:21
*** gmann_afk is now known as gmann17:21
logan-but yeah, i think it is originating traffic from those fake addresses17:21
*** jpena is now known as jpena|off17:22
openstackgerritMerged opendev/system-config master: Remove bazel version hack  https://review.opendev.org/68246917:22
logan-and yep clarkb I think those are all virtual macs. I'm pretty sure it would be possible for our physical network to leak RA's into the nodepool network, as it is not bridged to anything physical. it is only connected via a neutron virtual router17:23
clarkblogan-: ya just good to be able to narrow it down17:23
*** ramishra has quit IRC17:23
*** ociuhandu has joined #openstack-infra17:24
logan-sorry i meant it should not be possible*17:25
*** pcaruana has joined #openstack-infra17:25
clarkblogan-: I understood17:25
logan-:)17:25
clarkbbasically we see this from the virtual side and not real interfaces leaking through somehow17:25
*** ociuhandu has quit IRC17:28
*** ricolin has quit IRC17:31
*** mriedem_afk is now known as mriedem17:33
*** ykarel|away has quit IRC17:34
openstackgerritMatt Riedemann proposed opendev/elastic-recheck master: Add query for test_boot_server_from_encrypted_volume_luks bug 1820007  https://review.opendev.org/68321017:42
openstackbug 1820007 in os-brick "Failed to attach encrypted volumes after detach: volume device not found at /dev/disk/by-id" [Undecided,New] https://launchpad.net/bugs/182000717:42
*** rkukura has joined #openstack-infra17:52
*** pcaruana has quit IRC17:55
AJaegerconfig-core, please review these two changes to remove now obsolete publishing jobs: https://review.opendev.org/#/c/682972/ and https://review.opendev.org/68315417:56
AJaegerconfig-core, and https://review.opendev.org/#/c/682544/ to finish retiring of os-acc17:57
*** efried_pto has quit IRC18:01
openstackgerritMerged opendev/elastic-recheck master: Add query for test_boot_server_from_encrypted_volume_luks bug 1820007  https://review.opendev.org/68321018:06
openstackbug 1820007 in os-brick "Failed to attach encrypted volumes after detach: volume device not found at /dev/disk/by-id" [Undecided,Confirmed] https://launchpad.net/bugs/182000718:06
*** priteau has quit IRC18:07
*** Goneri has joined #openstack-infra18:12
openstackgerritJames E. Blair proposed zuul/zuul master: Fix gerrit errors from production  https://review.opendev.org/68300618:19
*** igordc has quit IRC18:20
*** jamesmcarthur has quit IRC18:21
*** jamesmcarthur has joined #openstack-infra18:22
*** whoami-rajat has quit IRC18:25
*** michael-beaver has quit IRC18:25
*** priteau has joined #openstack-infra18:27
*** priteau has quit IRC18:29
*** JorgeFranco has joined #openstack-infra18:40
*** trident has quit IRC18:45
*** lucasagomes has quit IRC18:53
*** trident has joined #openstack-infra18:55
rm_workhey can someone remind me, was Shade rolling into openstack-sdk / being replaced?18:56
rm_workwere they kind of a merge?18:56
clarkbrm_work: shade is now part of openstack sdk18:57
rm_workkk18:57
rm_workso it's kinda the same thing18:57
clarkbrm_work: the sdk repo contains both low level and high (shade) level objects you can interact with18:57
clarkbthey are in the same python package but you select whether or not you want one or the other based on objects that you use18:57
clarkb(or maybe its just function calls?)18:58
fungiand also has a direct-to-rest proxy as well for extra-low-level needs18:58
fungiyou don't have to choose just one either18:58
fungiyou can for example get a keystone session and then use that with some shade objects and some direct rest api calls18:59
fungimix-n-match as needed18:59
*** JorgeFranco has quit IRC18:59
*** trident has quit IRC19:01
*** JorgeFranco has joined #openstack-infra19:04
rm_workthanks19:05
rm_workand neither is going away or necessarily recommended over the other19:06
rm_workno deprecations19:06
rm_workjust use what makes sense19:06
clarkbthat is how I understand it19:07
*** Diabelko has quit IRC19:09
*** trident has joined #openstack-infra19:10
*** Diabelko has joined #openstack-infra19:15
*** kjackal has joined #openstack-infra19:21
rm_workok19:23
rm_workthere's some confusion with the folks i'm talking with since they found in some doc where it says Shade is superseded by openstack-sdk19:24
rm_workso there's a lot of talk about "updating this code to support openstack-sdk instead of shade"19:24
clarkbrm_work: well that bit is true, its just that the spirit of shade (and most of its code) is now in openstacksdk19:25
clarkbso your update is to import the shade bits from sdk package instead of the shade package19:25
rm_workk19:25
*** jcoufal has quit IRC19:26
AJaegerconfig-core, please review these two changes to remove now obsolete publishing jobs: https://review.opendev.org/#/c/682972/ and https://review.opendev.org/683154;19:38
clarkbAJaeger: are the related secrets able to be cleaned up too or do we use them elsewhere?19:40
openstackgerritMerged openstack/project-config master: Remove unused stx docs publish job  https://review.opendev.org/68315419:48
*** yamamoto has joined #openstack-infra19:49
AJaegerI think we use them elsewhere - let me double check19:49
AJaegerclarkb: yes, used still in many places19:51
AJaegerconfig-core, another +2a on https://review.opendev.org/682972 , please?19:51
openstackgerritMatthew Booth proposed openstack/diskimage-builder master: Fix invalid element-dep in vm  https://review.opendev.org/68322119:51
AJaegerclarkb: thanks19:51
*** pcaruana has joined #openstack-infra19:51
AJaegerconfig-core, a few more ready changes if anybody has time: https://review.opendev.org/682544 https://review.opendev.org/567696 https://review.opendev.org/68295419:52
*** yamamoto has quit IRC19:53
*** jamesmcarthur has quit IRC20:01
openstackgerritJames E. Blair proposed zuul/zuul-jobs master: Remove parent from validate-zone-db  https://review.opendev.org/68322520:02
*** jamesmcarthur has joined #openstack-infra20:04
*** kjackal has quit IRC20:06
*** jamesmcarthur has quit IRC20:20
*** jamesmcarthur has joined #openstack-infra20:21
*** jamesmcarthur has quit IRC20:22
*** larainema has joined #openstack-infra20:31
*** yamamoto has joined #openstack-infra20:31
*** pcaruana has quit IRC20:31
*** igordc has joined #openstack-infra20:33
*** TomStappaerts has joined #openstack-infra20:34
*** JorgeFranco has quit IRC20:35
*** JorgeFranco has joined #openstack-infra20:35
*** yamamoto has quit IRC20:36
*** sshnaidm is now known as sshnaidm|off20:42
*** eharney has quit IRC20:42
*** kjackal has joined #openstack-infra20:44
openstackgerritMerged zuul/zuul-jobs master: Remove parent from validate-zone-db  https://review.opendev.org/68322520:47
*** e0ne has quit IRC21:00
*** slaweq has quit IRC21:01
openstackgerritColleen Murphy proposed openstack/project-config master: Use iptables for openSUSE  https://review.opendev.org/68323621:11
*** e0ne has joined #openstack-infra21:12
*** markvoelker has quit IRC21:20
*** yamamoto has joined #openstack-infra21:20
*** benj_ has quit IRC21:31
*** benj has joined #openstack-infra21:31
*** benj is now known as Guest2963421:32
*** yamamoto has quit IRC21:32
*** cloudnull has joined #openstack-infra21:34
*** yamamoto has joined #openstack-infra21:35
*** lbragstad has quit IRC21:37
*** lbragstad has joined #openstack-infra21:37
*** eharney has joined #openstack-infra21:39
*** yamamoto has quit IRC21:44
*** yamamoto has joined #openstack-infra21:44
openstackgerritKevin Carter (cloudnull) proposed opendev/system-config master: Add proxy for quay  https://review.opendev.org/68324021:46
*** markvoelker has joined #openstack-infra21:48
openstackgerritKevin Carter (cloudnull) proposed opendev/system-config master: Add proxy for quay  https://review.opendev.org/68324021:49
*** xek has quit IRC21:51
*** eharney has quit IRC21:52
*** mattw4 has quit IRC22:01
*** mattw4 has joined #openstack-infra22:02
*** kjackal has quit IRC22:08
*** weifan has joined #openstack-infra22:09
*** weifan has quit IRC22:09
*** TomStappaerts has quit IRC22:15
*** JorgeFranco has quit IRC22:16
*** e0ne has quit IRC22:24
*** rlandy is now known as rlandy|biab22:30
*** notmyname has quit IRC22:30
*** notmyname has joined #openstack-infra22:31
*** markvoelker has quit IRC22:32
openstackgerritJames E. Blair proposed zuul/zuul master: Don't use urllib3 1.25.4  https://review.opendev.org/68325022:34
openstackgerritJames E. Blair proposed zuul/zuul master: Fix gerrit errors from production  https://review.opendev.org/68300622:35
*** armax has joined #openstack-infra22:39
*** mriedem is now known as mriedem_away22:41
*** xenos76 has quit IRC22:43
*** igordc has quit IRC22:44
*** signed8b_ has joined #openstack-infra22:48
*** signed8bit has quit IRC22:50
*** Tengu has quit IRC22:51
*** yamamoto has quit IRC22:57
*** goldyfruit___ has quit IRC23:00
*** igordc has joined #openstack-infra23:01
*** armax has quit IRC23:01
*** tkajinam has joined #openstack-infra23:02
*** mattw4 has quit IRC23:03
*** yamamoto has joined #openstack-infra23:03
*** Tengu has joined #openstack-infra23:03
*** mattw4 has joined #openstack-infra23:03
*** yamamoto has quit IRC23:08
*** yamamoto has joined #openstack-infra23:08
*** yamamoto has quit IRC23:12
*** tosky has quit IRC23:12
*** yamamoto has joined #openstack-infra23:12
*** rlandy|biab is now known as rlandy|bbl23:18
*** kaiokmo has quit IRC23:23
*** rcernin has joined #openstack-infra23:25
*** yamamoto has quit IRC23:26
*** dchen has joined #openstack-infra23:27
*** yamamoto has joined #openstack-infra23:28
*** e0ne has joined #openstack-infra23:30
*** e0ne has quit IRC23:30
*** yamamoto has quit IRC23:31
*** yamamoto has joined #openstack-infra23:31
*** yamamoto has quit IRC23:39
*** aaronsheffield has quit IRC23:44
*** yamamoto has joined #openstack-infra23:46
*** sthussey has quit IRC23:46
*** yamamoto has quit IRC23:48
*** yamamoto has joined #openstack-infra23:49
*** e0ne has joined #openstack-infra23:55
*** e0ne has quit IRC23:55
*** signed8b_ has quit IRC23:56
*** signed8bit has joined #openstack-infra23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!