Tuesday, 2019-12-10

*** ociuhandu has quit IRC00:01
*** owalsh has quit IRC00:03
*** owalsh has joined #openstack-infra00:03
openstackgerritMatt McEuen proposed openstack/project-config master: New project: ansible-role-airship  https://review.opendev.org/69811400:04
*** rcernin_ has joined #openstack-infra00:04
*** owalsh_ has joined #openstack-infra00:05
*** rcernin has quit IRC00:07
*** owalsh has quit IRC00:08
*** ociuhandu has joined #openstack-infra00:10
openstackgerritIan Wienand proposed opendev/system-config master: Add roles for a basic static server  https://review.opendev.org/69758700:10
*** ociuhandu has quit IRC00:14
*** ociuhandu has joined #openstack-infra00:17
*** rcernin_ has quit IRC00:19
*** ociuhandu has quit IRC00:21
*** ociuhandu has joined #openstack-infra00:23
*** gyee has quit IRC00:24
*** rcernin has joined #openstack-infra00:27
*** ociuhandu has quit IRC00:28
*** jamesmcarthur has joined #openstack-infra00:28
*** dave-mccowan has joined #openstack-infra00:29
*** Goneri has joined #openstack-infra00:29
openstackgerritIan Wienand proposed zuul/nodepool master: Also build sibling container images  https://review.opendev.org/69739300:30
openstackgerritIan Wienand proposed zuul/nodepool master: [wip] move openstack testing to use containerised daemon  https://review.opendev.org/69346400:30
*** ociuhandu has joined #openstack-infra00:31
*** dave-mccowan has quit IRC00:33
*** sshnaidm is now known as sshnaidm|afk00:35
*** ociuhandu has quit IRC00:36
*** dave-mccowan has joined #openstack-infra00:36
openstackgerritClark Boylan proposed opendev/puppet-openafs master: Increase udp buffer sizes when running afs  https://review.opendev.org/69758800:41
clarkblets see if that makes the linter happy00:41
*** ociuhandu has joined #openstack-infra00:41
*** kjackal has quit IRC00:44
*** ociuhandu has quit IRC00:46
*** yamamoto has quit IRC00:49
*** rf0lc0 has joined #openstack-infra00:51
*** ociuhandu has joined #openstack-infra00:51
*** rfolco has quit IRC00:51
*** dave-mccowan has quit IRC00:52
*** Goneri has quit IRC00:55
*** ricolin has joined #openstack-infra00:56
*** ociuhandu has quit IRC00:57
*** yamamoto has joined #openstack-infra01:01
ianwclarkb: i think i caught another mirror job error01:01
ianwhttps://zuul.opendev.org/t/openstack/build/7469f5925fc04750b600c0e5ef9ed835/log/mirror01.openafs.provider.opendev.org/acme.sh/acme.sh.log01:01
ianwnot exactly sure what that means ...01:01
*** ociuhandu has joined #openstack-infra01:02
clarkbI think that is saying authz failed against le staging?01:03
ianwIn short, the cURL error code 35 denotes an SSL connection error01:03
clarkbis it possible the remote simply told us to go away?01:03
ianwmaybe; it is the staging environment01:04
clarkbianw: maybe we should have ~3 retries with a wait between attemps if we fail in that manner? I don't know how to distinguish that from "no new cert needed"01:04
ianw... and then the openafs client failed to install for unknown reasons too https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_8fa/697587/7/check/system-config-run-static/8fabb26/bridge.openstack.org/ara-report/result/e747fab8-e775-4b05-9a55-6a48b78370cf/01:05
ianwactually: Cache size (50000000) must be less than 95% of partition size (which is 36856200). Lower cache size01:06
ianware we not growing disks properly in some cases?01:06
*** ociuhandu has quit IRC01:06
clarkbianw: did that job run on rax? it has a smaller / then we put big /opt in place01:06
*** jamesmcarthur has quit IRC01:07
ianwit did run in rax (https://zuul.opendev.org/t/openstack/build/8fabb262c9f24cee9a1f399c90ec8b77/log/zuul-info/inventory.yaml) ... but i've never seen that before01:08
ianwsurely this can't be the first time an openafs system-config job ahs run in rax01:08
clarkbianw: if you grep the build uuid on zuul executors the cleanup playbook should capture a df01:09
clarkbto confirm this hunch01:09
*** goldyfruit_ has joined #openstack-infra01:09
ianwon a fresh rax-ord node : /dev/xvda1       37G  4.0G   32G  12% /01:11
*** ociuhandu has joined #openstack-infra01:12
clarkbis 50000000 5GB?01:12
clarkbor 50GB?01:12
clarkbnot sure what unit we are working with01:12
ianwshould be 50gb ... how has this never failed before?01:12
clarkbmaybe it didn't check before?01:12
clarkbor we always got lucky and ran on not rax?01:12
ianwwhy am i always so lucky! :)01:13
ianwzuul/templates/group_vars/mirror_opendev.yaml.j2:afs_client_cache_size: 500000 # 500MiB01:15
clarkbnow that I think about this more I want to say we do ya that01:15
clarkbare we not applying that properly?01:16
ianwohhhhh ... that's only applying to mirror node01:16
clarkbah01:16
ianwnot the new static.opendev.org node01:16
ianwok, that makes sense01:16
clarkbianw: we can set that in group_vars/all.yaml01:16
clarkbunder zuul/templates01:16
ianwyeah, or for all afs-clients01:16
*** ociuhandu has quit IRC01:16
clarkbthen it should apply to all hosts01:16
clarkb++01:16
*** ociuhandu has joined #openstack-infra01:21
*** jamesmcarthur has joined #openstack-infra01:24
*** jamesmcarthur has quit IRC01:24
*** jamesmcarthur has joined #openstack-infra01:24
*** ociuhandu has quit IRC01:26
openstackgerritMichael Johnson proposed openstack/diskimage-builder master: Enable devstack force=true for xenial based jobs  https://review.opendev.org/69812201:29
*** ociuhandu has joined #openstack-infra01:29
openstackgerritMichael Johnson proposed openstack/diskimage-builder master: Enable devstack force=yes for xenial based jobs  https://review.opendev.org/69812201:32
*** jamesmcarthur has quit IRC01:32
ianwhrm,i thought we had a change out to updat ethat to bionic01:34
*** ociuhandu has quit IRC01:37
*** larainema has joined #openstack-infra01:38
*** ociuhandu has joined #openstack-infra01:42
*** goldyfruit_ has quit IRC01:43
*** ociuhandu has quit IRC01:47
larainemahello infra-core, question here: how we can fork opendev source code? like to github01:48
*** ociuhandu has joined #openstack-infra01:49
ianwlarainema: do you mean to mirror a repository, so that the changes are in sync with opendev?01:52
*** ociuhandu has quit IRC01:57
*** lastmikoi has quit IRC02:01
larainemaianw, yes02:06
ianwlarainema: you need to define a job to push changes; see http://lists.openstack.org/pipermail/openstack-discuss/2019-April/005007.html02:08
*** ociuhandu has joined #openstack-infra02:08
*** lastmikoi has joined #openstack-infra02:08
*** nicolasbock has quit IRC02:10
*** Xuchu has joined #openstack-infra02:11
openstackgerritIan Wienand proposed opendev/system-config master: Add roles for a basic static server  https://review.opendev.org/69758702:12
openstackgerritIan Wienand proposed opendev/system-config master: afs-client: move reduced cache to group variable  https://review.opendev.org/69812802:12
*** ociuhandu has quit IRC02:13
*** ociuhandu has joined #openstack-infra02:14
*** slaweq has joined #openstack-infra02:17
larainemathanks ianw, will look at it02:17
*** slaweq has quit IRC02:22
*** ociuhandu has quit IRC02:22
*** igordc has quit IRC02:24
*** ykarel|away has joined #openstack-infra02:34
*** ociuhandu has joined #openstack-infra02:38
*** dmellado has quit IRC02:45
*** vesper11 has quit IRC02:45
*** tridde has joined #openstack-infra02:45
*** trident has quit IRC02:46
*** vesper11 has joined #openstack-infra02:46
*** ociuhandu has quit IRC02:47
*** dmellado has joined #openstack-infra02:48
*** diablo_rojo has quit IRC02:51
*** yamamoto has quit IRC02:55
*** yamamoto has joined #openstack-infra03:01
*** slaweq has joined #openstack-infra03:06
*** slaweq has quit IRC03:10
*** Xuchu_ has joined #openstack-infra03:20
*** Xuchu has quit IRC03:23
*** Xuchu_ is now known as Xuchu03:23
*** slaweq has joined #openstack-infra03:25
*** slaweq has quit IRC03:30
*** psachin has joined #openstack-infra03:31
*** jamesmcarthur has joined #openstack-infra03:40
*** ociuhandu has joined #openstack-infra03:47
*** diablo_rojo has joined #openstack-infra03:48
*** hongbin has joined #openstack-infra03:50
*** ociuhandu has quit IRC03:51
*** ramishra has joined #openstack-infra03:55
*** nicolasbock has joined #openstack-infra04:02
*** rh-jelabarre has quit IRC04:08
openstackgerritSampath Priyankara (samP) proposed opendev/irc-meetings master: Change Masakari meeting frequency to biweekly-even  https://review.opendev.org/69813504:15
*** dchen has quit IRC04:19
*** dchen has joined #openstack-infra04:21
*** slaweq has joined #openstack-infra04:29
*** rishabhhpe has joined #openstack-infra04:29
*** jamesmcarthur has quit IRC04:32
*** tsukasasa has joined #openstack-infra04:32
*** slaweq has quit IRC04:36
*** ociuhandu has joined #openstack-infra04:41
*** hongbin has quit IRC04:41
*** udesale has joined #openstack-infra04:41
*** ykarel|away has quit IRC04:43
*** ociuhandu has quit IRC04:46
*** nicolasbock has quit IRC04:46
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop Xenial from functional test  https://review.opendev.org/69813604:46
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop Xenial from functional test  https://review.opendev.org/69813604:49
*** tsukasasa has quit IRC04:53
*** ykarel|away has joined #openstack-infra04:56
openstackgerritIan Wienand proposed opendev/system-config master: Add roles for a basic static server  https://review.opendev.org/69758704:57
*** diablo_rojo has quit IRC05:00
openstackgerritJens Harbott (frickler) proposed opendev/gerritbot master: WIP: Add Python 3 support  https://review.opendev.org/54560705:00
*** surpatil has joined #openstack-infra05:07
*** raukadah is now known as chkumar|ruck05:23
*** ociuhandu has joined #openstack-infra05:35
*** slaweq has joined #openstack-infra05:35
*** ykarel|away is now known as ykarel05:36
*** ociuhandu has quit IRC05:40
*** slaweq has quit IRC05:40
*** slaweq has joined #openstack-infra05:46
*** slaweq has quit IRC05:50
openstackgerritSampath Priyankara (samP) proposed openstack/project-config master: Add horizon-core to masakari-dashboard  https://review.opendev.org/69814105:51
*** SurajPatil has joined #openstack-infra05:52
*** surpatil has quit IRC05:54
*** surpatil has joined #openstack-infra06:01
*** slaweq has joined #openstack-infra06:01
*** jamesmcarthur has joined #openstack-infra06:01
*** SurajPatil has quit IRC06:03
*** slaweq has quit IRC06:05
*** jamesmcarthur has quit IRC06:06
*** kjackal has joined #openstack-infra06:08
*** dpawlik has joined #openstack-infra06:12
*** yamamoto has quit IRC06:14
*** slaweq has joined #openstack-infra06:18
*** dpawlik has quit IRC06:18
*** dpawlik has joined #openstack-infra06:20
*** yamamoto has joined #openstack-infra06:21
*** slaweq has quit IRC06:23
*** dpawlik has quit IRC06:27
openstackgerritIan Wienand proposed openstack/diskimage-builder master: Drop Xenial from functional test  https://review.opendev.org/69813606:27
*** ociuhandu has joined #openstack-infra06:29
*** jtomasek has joined #openstack-infra06:31
openstackgerritTobias Henkel proposed zuul/zuul master: enqueue: make trigger deprecated  https://review.opendev.org/69544606:34
*** slaweq has joined #openstack-infra06:34
*** ociuhandu has quit IRC06:34
*** slaweq has quit IRC06:39
*** psachin has quit IRC06:42
larainemahi ianw, if the failed post pipline build can be re-triggered?06:42
*** dpawlik has joined #openstack-infra06:43
*** psachin has joined #openstack-infra06:49
rishabhhpeHi .. Openstack is not supporting for ubuntu xenial release ?07:00
*** lpetrut has joined #openstack-infra07:00
*** diablo_rojo has joined #openstack-infra07:01
*** ociuhandu has joined #openstack-infra07:02
*** ociuhandu has quit IRC07:06
AJaegerrishabhhpe: older OpenStack releases do. But this is not the right place to ask, we run the Infrastructure here to develop and test OpenStack. Better ask on #openstack if you have generic questions07:08
AJaegerlarainema: why not merge another change?07:08
larainemaAJaeger, yes, that's what I am doing, just curious if we have a way to do it07:12
rishabhhpeAjaeger: Thank you07:13
*** ociuhandu has joined #openstack-infra07:26
*** pgaxatte has joined #openstack-infra07:28
*** ociuhandu has quit IRC07:32
AJaegerlarainema: an admin can do it for you - but that's a manual step, so we very rarely do it07:37
*** pcaruana has joined #openstack-infra07:39
openstackgerritMerged zuul/nodepool master: Dockerfile: add user to shadow file too  https://review.opendev.org/69364707:46
*** ociuhandu has joined #openstack-infra07:46
*** ykarel is now known as ykarel|lunch07:47
*** yamamoto has quit IRC07:52
larainemaAJaeger, understood, thanks, no worry,  I am merging another change.07:54
*** rcernin has quit IRC07:54
*** rishabhhpe has quit IRC07:55
*** slaweq has joined #openstack-infra08:01
*** tkajinam has quit IRC08:06
*** factor has quit IRC08:10
*** tosky has joined #openstack-infra08:11
*** witek has joined #openstack-infra08:13
openstackgerritSampath Priyankara (samP) proposed openstack/project-config master: Add horizon-core to masakari-dashboard  https://review.opendev.org/69814108:13
*** rishabhhpe has joined #openstack-infra08:15
*** apetrich has joined #openstack-infra08:16
*** dchen has quit IRC08:16
*** tesseract has joined #openstack-infra08:27
*** kjackal has quit IRC08:34
*** cgoncalves has quit IRC08:40
*** rpittau|afk is now known as rpittau08:41
*** hashar has joined #openstack-infra08:43
*** kjackal has joined #openstack-infra08:46
*** iurygregory has joined #openstack-infra08:46
*** ociuhandu has quit IRC08:48
*** ralonsoh has joined #openstack-infra08:48
*** jpena|off is now known as jpena08:53
*** pkopec has joined #openstack-infra08:54
*** sshnaidm|afk is now known as sshnaidm08:58
*** priteau has joined #openstack-infra09:00
kevinzianw: ping09:01
sshnaidmplease, remind - how can I use jobs in project that are defined in other project?09:04
*** yamamoto has joined #openstack-infra09:06
*** yamamoto has quit IRC09:10
*** gfidente|afk has quit IRC09:13
*** lucasagomes has joined #openstack-infra09:15
*** ociuhandu has joined #openstack-infra09:17
fricklersshnaidm: job definitions should be global (within the tenant, e.g. openstack), so you should be able to use them just like any other job09:20
*** ociuhandu has quit IRC09:22
sshnaidmfrickler, not sure I understand.. I need to use the job in different project: https://review.opendev.org/#/c/698085/09:23
fricklersshnaidm: you may not use duplicate job names, precisely because they are global. if you define a job within project ansible-collections-openstack, it's name should start with the project name09:25
*** spsurya has joined #openstack-infra09:25
fricklersshnaidm: otherwise omit the job definition part in your change and just do the project part09:25
*** derekh has joined #openstack-infra09:37
*** owalsh_ is now known as owalsh09:37
*** ociuhandu has joined #openstack-infra09:42
*** gfidente has joined #openstack-infra09:47
openstackgerritMerged opendev/irc-meetings master: Change Masakari meeting frequency to biweekly-even  https://review.opendev.org/69813509:52
openstackgerritFabien Boucher proposed zuul/zuul master: Pagure: remove connectors burden and simplify code  https://review.opendev.org/69613409:59
openstackgerritMatthieu Huin proposed zuul/zuul master: authentication config: add optional max_token_age, skew  https://review.opendev.org/64240810:04
*** priteau has quit IRC10:05
*** dtantsur|afk is now known as dtantsur10:15
*** slaweq has quit IRC10:17
*** slaweq has joined #openstack-infra10:19
*** derekh has quit IRC10:20
*** ykarel|lunch is now known as ykarel10:22
*** pgaxatte has quit IRC10:22
*** etingof has quit IRC10:26
openstackgerritMerged zuul/zuul master: enqueue: make trigger deprecated  https://review.opendev.org/69544610:30
openstackgerritFabien Boucher proposed zuul/zuul master: Pagure - Refresh token and recheck sign when token regenerated  https://review.opendev.org/69820810:33
*** hashar has quit IRC10:48
*** kambiz has quit IRC11:09
*** kjackal has quit IRC11:11
*** ociuhandu has quit IRC11:13
*** ociuhandu has joined #openstack-infra11:13
*** kambiz has joined #openstack-infra11:14
*** kjackal has joined #openstack-infra11:23
*** ociuhandu has quit IRC11:28
*** rishabhhpe has quit IRC11:34
*** rf0lc0 has quit IRC11:40
*** ijw has joined #openstack-infra11:43
*** ykarel is now known as ykarel|away11:43
*** ijw has quit IRC11:47
*** dtantsur is now known as dtantsur|ikea11:54
*** jklare has quit IRC11:58
*** nicolasbock has joined #openstack-infra12:00
*** SurajPatil has joined #openstack-infra12:00
*** mtreinish has joined #openstack-infra12:00
*** jklare has joined #openstack-infra12:01
*** udesale has quit IRC12:01
*** lucasagomes is now known as lucas-hungry12:02
*** weshay_pto is now known as weshay12:03
*** surpatil has quit IRC12:03
*** cgoncalves has joined #openstack-infra12:09
*** owalsh has quit IRC12:14
*** ociuhandu has joined #openstack-infra12:23
*** ociuhandu has quit IRC12:27
*** surpatil has joined #openstack-infra12:32
*** jpena is now known as jpena|lunch12:34
*** SurajPatil has quit IRC12:34
openstackgerritAlbin Vass proposed zuul/nodepool master: Keys must be defined for host-key-checking: false  https://review.opendev.org/69802912:34
*** spsurya has quit IRC12:35
*** larainema has quit IRC12:44
*** owalsh has joined #openstack-infra12:46
*** cgoncalves has quit IRC12:47
openstackgerritAlbin Vass proposed zuul/nodepool master: Keys must be defined for host-key-checking: false  https://review.opendev.org/69802912:48
*** Xuchu has quit IRC12:51
*** rh-jelabarre has joined #openstack-infra12:55
*** gfidente has quit IRC13:00
*** dpawlik has quit IRC13:01
*** rlandy has joined #openstack-infra13:01
*** hashar has joined #openstack-infra13:06
*** lucas-hungry is now known as lucasagomes13:06
*** owalsh has quit IRC13:08
*** owalsh has joined #openstack-infra13:08
*** aaronsheffield has joined #openstack-infra13:15
*** jamesmcarthur has joined #openstack-infra13:15
*** cgoncalves has joined #openstack-infra13:23
*** jamesmcarthur has quit IRC13:28
*** owalsh has quit IRC13:29
*** jamesmcarthur has joined #openstack-infra13:30
*** jamesmcarthur has quit IRC13:34
*** owalsh has joined #openstack-infra13:35
*** goldyfruit_ has joined #openstack-infra13:37
*** jpena|lunch is now known as jpena13:37
*** goldyfruit___ has joined #openstack-infra13:41
*** Goneri has joined #openstack-infra13:43
*** goldyfruit_ has quit IRC13:44
*** jamesmcarthur has joined #openstack-infra13:46
*** Xuchu has joined #openstack-infra13:56
*** tkajinam has joined #openstack-infra14:01
*** mriedem has joined #openstack-infra14:01
*** liuyulong has joined #openstack-infra14:02
*** ykarel|away has quit IRC14:04
*** gfidente has joined #openstack-infra14:06
*** eharney has quit IRC14:07
*** Xuchu has quit IRC14:23
*** chkumar|ruck is now known as raukadah14:26
*** liuyulong has quit IRC14:32
*** ociuhandu has joined #openstack-infra14:35
*** pcaruana has quit IRC14:36
*** surpatil has quit IRC14:36
*** hashar has quit IRC14:38
*** ykarel|away has joined #openstack-infra14:40
*** ykarel|away is now known as ykarel14:40
openstackgerritSlawek Kaplonski proposed openstack/project-config master: Update Neutron's Grafana dashboard  https://review.opendev.org/69826414:41
*** eharney has joined #openstack-infra14:47
openstackgerritMonty Taylor proposed opendev/storyboard master: Build container images  https://review.opendev.org/61119114:48
*** tkajinam has quit IRC14:52
openstackgerritMerged zuul/nodepool master: Aws cloud-image is referred to from pool labels section  https://review.opendev.org/69799814:58
*** igordc has joined #openstack-infra14:58
*** lbragsta_ has joined #openstack-infra14:59
*** pcaruana has joined #openstack-infra15:01
*** jamesmcarthur has quit IRC15:03
*** rosmaita has quit IRC15:06
openstackgerritMatthieu Huin proposed zuul/zuul master: authentication config: add optional token_expiry  https://review.opendev.org/64240815:09
openstackgerritMatthieu Huin proposed zuul/zuul master: [DNM][WIP] admin REST API: zuul-web integration  https://review.opendev.org/64353615:09
*** rosmaita has joined #openstack-infra15:09
*** ijw has joined #openstack-infra15:10
*** rascasoft has joined #openstack-infra15:12
*** jamesmcarthur has joined #openstack-infra15:15
*** jamesmcarthur has quit IRC15:15
*** bnemec has quit IRC15:15
*** jamesmcarthur_ has joined #openstack-infra15:15
fungiinfra-root: heads up, we got a notification from inap about a job node with an exposed portmapper service (this can be found by crawlers and exploited to mount reflection attacks against victims elsewhere on the internet. they gave us an ip address and timestamp, so i've been able to track it back to this build: http://zuul.opendev.org/t/openstack/build/93f6432502b0428486d24a97fe30e82415:21
fungislaweq: that ^ seems to be a build for a change in a neutron deliverable15:24
Shrewsfungi: is that node still active?15:27
fungithis is the detail from the report we received: http://paste.openstack.org/show/787376/15:27
fungiShrews: heavens no, it just happened to get scanned by inap's vulnerability scanner while a job was running15:28
Shrewsoh, i thought it would be odd to be long-lived15:28
Shrewsunless we held it15:29
fungiin the past we've used incidents like this to help teams fix their jobs to not expose dangerous services to the internet15:29
fricklerhmm, "udp        0      0 0.0.0.0:111             0.0.0.0:*                           1/systemd" is what I see on a centos8 node I happen to have held ... :-/15:31
fungiyeah, is iptables/netfilter allowing access to it from the world?15:33
fungiin most cases, we see this happen in jobs where someone has decided that figuring out firewall rules is "hard" and so they just turn them off15:33
slaweqfungi: I don't see anything "special" in the patch on which this runs15:34
fungislaweq: neither did i, it may be systemic to networking-ovn-tempest-dsvm-ovs-release jobs, or an even broader class of jobs from which that one inherits15:34
slaweqfungi: this job inherits from networking-ovn-base: https://opendev.org/openstack/networking-ovn/src/branch/master/zuul.d/networking-ovn-jobs.yaml#L215:35
slaweqand this one from devstack-tempest15:35
fungimost of our providers don't run vulnerability scanners across servers, and the intersection of an infrequent (perhaps daily) scan with specific jobs running in that provider could result in few opportunities for them to spot and notify us15:36
*** lbragsta_ has quit IRC15:36
slaweqand I don't see anything "special" in this job definition15:36
fungiprobably best to stop assuming there's anything special in the change or the job definition, and instead think in terms of some class of jobs may be incorrectly handling firewall configuration15:37
*** lbragsta_ has joined #openstack-infra15:37
*** ijw has quit IRC15:40
*** iokiwi has quit IRC15:40
*** adriant has quit IRC15:40
corvusi don't know when this was generated, but i'd guess pretty late in the job: http://zuul.opendev.org/t/openstack/build/93f6432502b0428486d24a97fe30e824/log/controller/logs/iptables.txt.gz15:40
openstackgerritMatthieu Huin proposed zuul/zuul master: authentication config: add optional max_validity_time, skew  https://review.opendev.org/64240815:41
openstackgerritMatthieu Huin proposed zuul/zuul master: [DNM][WIP] admin REST API: zuul-web integration  https://review.opendev.org/64353615:42
fungier, also i said inap earlier, but this was ovh not inap15:43
fricklerfungi: how certain can we be that the timestamp is indeed utc?15:44
fungier, sorry, node was in inap, logs are in ovh15:47
fungimoar coffee15:47
* Shrews shovels coffee beans on top of fungi :)15:47
fungifrickler: yeah, it's a fair point, we only have a few times where nodes were booted with that ip address by nl03 that day though15:47
fungithe devstack log indicates the time of the scan (if we assume utc and accurate clocks) occurred in the middle of `pip2.7 install -c /opt/stack/requirements/upper-constraints.txt -r /opt/stack/neutron-tempest-plugin/test-requirements.txt -e /opt/stack/neutron-tempest-plugin`15:48
mordredShrews: can I have some of those?15:48
Shrewsbeans for all!15:49
fungimgagne: do you have any idea if inap's network scanner reports are timestamped in utc? they don't say: http://paste.openstack.org/show/787376/15:50
*** ykarel is now known as ykarel|afk15:50
fungiat 04:05:06.947 the devstack log identifies that iptables is already installed, so that's good at least15:53
corvuscurious the event report doesn't agree on the date15:53
corvusif the subject date is EST, and the eventtime is UTC, that is plausible considering utc offset15:55
corvusstill, sticking a "Z" on the eventtime would be nice15:55
*** lbragsta_ has quit IRC15:55
fricklerI tested against a currently running job of the same type and don't see anything open. confirmed by logging into 158.69.70.17 http://zuul.openstack.org/stream/d495ccb08d094839a0c5a6ef21afaea5?logfile=console.log15:56
fricklerthat job is currently in the tempest run phase15:56
*** goldyfruit_ has joined #openstack-infra15:57
*** jklare has quit IRC15:59
fungicorvus: yeah, i too found that interesting. i also suspect that they may date the scans by when they initiate them, so it could have wrapped over the midnight boundary between when the scan started and when that particular problem was identified15:59
*** goldyfruit___ has quit IRC16:00
corvusfungi: oh yep, then that gives a plausible explanation for both being local time16:00
fungior both being utc for that matter16:01
*** jklare has joined #openstack-infra16:02
*** ociuhandu has quit IRC16:02
fungianyway, might make sense to put a pin in this investigation and keep an eye out for anything we think could contribute to that behavior or see if we get more notices which will allow us to better correlate16:02
*** dtantsur|ikea is now known as dtantsur16:02
fungii mostly wanted to jump on it quickly because they took nearly a week to let us know and in the past we've gotten reports from them just at the edge of our nodepool log retention16:03
funginow we at least have something to compare subsequent reports against16:03
*** ijw has joined #openstack-infra16:09
*** igordc has quit IRC16:11
openstackgerritPaul Belanger proposed zuul/zuul master: Switch ansible_default to 2.8  https://review.opendev.org/67669516:12
openstackgerritPaul Belanger proposed zuul/zuul master: Support Ansible 2.9  https://review.opendev.org/67485416:12
openstackgerritPaul Belanger proposed zuul/zuul master: Remove support for ansible 2.5  https://review.opendev.org/65043116:16
mordredfungi: https://review.opendev.org/#/c/611191/ is green if you wanna re-+2 it16:17
*** iurygregory has quit IRC16:18
*** iurygregory has joined #openstack-infra16:19
*** ricolin has quit IRC16:19
openstackgerritMichael Johnson proposed openstack/diskimage-builder master: Set correct python version for non-chroot scripts  https://review.opendev.org/69721116:23
fungimordred: was ps10 just a rebase?16:23
mordredfungi: yes16:24
openstackgerritMonty Taylor proposed zuul/zuul master: Extract an abstract base Parser class  https://review.opendev.org/54561016:28
openstackgerritPaul Belanger proposed zuul/zuul master: Switch ansible_default to 2.8  https://review.opendev.org/67669516:29
openstackgerritPaul Belanger proposed zuul/zuul master: Support Ansible 2.9  https://review.opendev.org/67485416:29
openstackgerritPaul Belanger proposed zuul/zuul master: Remove support for ansible 2.5  https://review.opendev.org/65043116:29
*** lpetrut has quit IRC16:29
mgagnefungi: sorry, I would have to ask the abuse department about that one.16:31
*** gyee has joined #openstack-infra16:37
*** lpetrut has joined #openstack-infra16:39
fungimgagne: no worries, we may be able to better confirm it if we end eventually up with more reports16:40
*** goldyfruit___ has joined #openstack-infra16:41
mgagnefungi: yeah, I wouldn't worry about them for now. I'm trying to track down who manages the scanner. There was a lot of staff movements in the last months/years.16:41
*** goldyfruit_ has quit IRC16:44
*** jpena is now known as jpena|brb16:45
*** lpetrut has quit IRC16:50
*** jaosorior has joined #openstack-infra16:50
fungithanks!16:51
mordredinfra-root: got an update from RH IT on the email issue from yesterday - there is investigation underway as to what's going on, and they also indicated that they're putting in a workaround in the meantime16:51
fungithanks for the update mordred!16:53
*** ykarel|afk is now known as ykarel|away16:53
*** ijw_ has joined #openstack-infra16:53
*** ijw has quit IRC16:58
*** tesseract has quit IRC16:58
*** iurygregory has quit IRC17:02
*** lucasagomes has quit IRC17:04
*** ykarel|away has quit IRC17:08
openstackgerritMatthieu Huin proposed zuul/zuul master: [DNM][WIP] admin REST API: zuul-web integration  https://review.opendev.org/64353617:08
mgagnefungi: timezone is UTC.17:19
mgagnefungi: I suggested adding a Z to indicate UTC timezone.17:20
openstackgerritMerged opendev/storyboard master: Build container images  https://review.opendev.org/61119117:22
*** witek has quit IRC17:23
*** jpena|brb is now known as jpena17:24
openstackgerritMerged zuul/zuul master: Switch ansible_default to 2.8  https://review.opendev.org/67669517:24
*** ociuhandu has joined #openstack-infra17:25
*** tosky has quit IRC17:27
*** ociuhandu has quit IRC17:29
*** rpittau is now known as rpittau|afk17:29
fungithanks mgagne!!! we suspected that was the case but it's good to be sure17:32
*** rlandy is now known as rlandy|brb17:36
*** AR2018 has joined #openstack-infra17:37
*** dtantsur is now known as dtantsur|afk17:38
*** AR2018 has quit IRC17:39
openstackgerritMerged zuul/zuul master: Support Ansible 2.9  https://review.opendev.org/67485417:40
*** rlandy|brb is now known as rlandy17:45
corvuswe'd like to restart zuul again to smoketest the new 2.9 support before cutting a release17:48
corvusi'll let release know17:49
*** sshnaidm is now known as sshnaidm|afk17:50
*** armax has quit IRC17:51
corvusrestarting now17:53
corvusfungi, clarkb: it looks like we may actually want to be running something like "python /opt/zuul/tools/zuul-changes.py http://zuul.opendev.org >queue.sh"17:54
corvusthat appears to do all pipelines of all tenants17:54
corvuswithout the weird "None" tenant thing17:54
corvus15afed554e2bbac87aad83b0a42cd47c66858cfd is the commit17:55
*** jaosorior has quit IRC17:59
fungicorvus: i concur. that's where i arrived at with my analysis yesterday17:59
fungiif you're pointing it at a multi-tenant api url the tenant parameter is effectively ignored18:00
fungiat which point filtering across tenants by common pipeline names seems a little strange18:00
fungibut as you observed, you can just omit them and get a dump of everything, then filter the result by tenant/pipeline as needed when reenqueuing18:01
AJaegermnaser: want to merge https://review.opendev.org/681584 as next step for static.o.o? That's the final patch I pushed, so rest is for you...18:03
corvusmerger stopping is very slow ...18:04
*** ijw_ has quit IRC18:07
fungii don't remember seeing that in yesterday's restart18:07
corvusi think we're waiting on zm0318:08
*** ijw has joined #openstack-infra18:09
corvuslooks like it's still doing something with nova18:09
corvuswe probably need to clean out those repos18:09
clarkbya executor shutdown was the slow thing yesterday ~10 minutes18:09
corvuswe could kill it, or, it's still running, so we could just wait a bit more18:10
johnsom"Something went wrong." I guess there is some kind of maintenance going on?18:10
corvusit seems to take 3 minutes to create each merge commit18:11
corvusand it's a bkc nova stack18:11
corvusjohnsom: yes, we're restarting zuul; it's a bit slow18:11
mnaserAJaeger: what would be the next steps?18:15
*** lbragstad_ has joined #openstack-infra18:16
*** hrybacki has joined #openstack-infra18:17
*** rf0lc0 has joined #openstack-infra18:22
*** goldyfruit_ has joined #openstack-infra18:22
*** goldyfruit___ has quit IRC18:25
*** jamesmcarthur_ has quit IRC18:26
*** jamesmcarthur has joined #openstack-infra18:26
TheJuliashould zuul.opendev.org still be returning 500s?18:26
*** ijw has quit IRC18:26
corvusi reckon we should kill zm0318:27
*** ijw has joined #openstack-infra18:27
noonedeadpunkbtw, it looks like some patches don't appear in zuul at all - for instance https://review.opendev.org/#/c/695877/18:28
*** ijw has joined #openstack-infra18:28
corvusokay it finished the restart18:28
fungiyeah, let's just ungracefully stop the merger daemon on 0318:28
fungidid you wind up manually killing it or did it just now wrap up on its own18:28
fungi?18:28
corvusi killed it18:28
corvusthe scheduler is not running18:29
funginoonedeadpunk: yeah, we're in the middle of a restart, the earlier queued changes will be readded from a dump which was created just prior to the restart18:29
corvusrestarting that18:29
corvusi'm assuming the scheduler timed out waiting for mergers18:30
Shrewsyay for sorted hold requests18:32
corvusokay it's back up now18:35
corvusre-enqueing18:35
*** jamesmcarthur has quit IRC18:36
*** ociuhandu has joined #openstack-infra18:39
*** kopecmartin is now known as kopecmartin|off18:41
*** jpena is now known as jpena|off18:42
*** ociuhandu has quit IRC18:44
corvus#status log restarted all of zuul at commit 15afed554e2bbac87aad83b0a42cd47c66858cfd18:45
AJaegermnaser: best check the spec, I don't remember all details. AFAIK you have two options as next step: 1) Add jobs for remaining sites ; 2) Shutdown old site, remove old jobs and use new static site. I think ianw lays the groundwork for 2 right now.18:45
openstackstatuscorvus: finished logging18:45
*** ijw_ has joined #openstack-infra18:45
corvuspabelanger: you should be clear to test 2.9 now18:45
*** gfidente is now known as gfidente|afk18:46
openstackgerritAndreas Jaeger proposed openstack/project-config master: Move security site to AFS publishing  https://review.opendev.org/68158418:47
*** ijw has quit IRC18:48
pabelangercorvus: \o/18:48
pabelangertyty18:48
mordredinfra-root: today's plague of the stomach is enworsening so I'm going to step AFK for a bit. I don't have much progress to report in meeting due to last week's plague18:49
clarkbmordred: the USDA recommends you cook turkey to a minimum of 165F18:50
*** psachin has quit IRC19:02
corvusinfra-root: there seems to be a lot of failing tox related jobs19:03
EmilienMhi all, we have our pep8 jobs failing19:03
EmilienM "msg": "a bytes-like object is required, not 'str'"19:04
corvushttp://paste.openstack.org/show/787397/19:04
EmilienMyeah19:04
corvuspabelanger: could tox-siblings be incompatible with the version bump?19:04
corvusmaybe we should set the default back to 2.719:05
pabelangerdid python interpreter get changed to python3?19:05
pabelangerwith auto setting now19:05
corvuspabelanger: would that have changed between the last 2 restarts?19:05
pabelangerchecking19:05
corvusor are you thinking python3 + 2.8 may be a problem?19:06
pabelangerIIRC, that is 2.8 default now19:06
pabelangerya19:06
pabelangerif jobs were upgraded to ansible 2.8, ithink that is default now19:06
pabelangerlooking at logs19:06
corvuseither way, pinnig to 2.7 should probably be our first step?19:06
pabelangerhttps://review.opendev.org/#/c/676697/19:06
*** efried is now known as efried_afk19:06
pabelangerwe should do that, until openstack has the ability to test ansible 2.819:07
pabelanger      ansible_python_interpreter: auto19:07
pabelangerhttps://storage.bhs.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_824/696042/4/gate/openstack-tox-py36/8242e97/zuul-info/inventory.yaml19:07
pabelangerso, maybe that is the issue19:07
corvusright, but that changed a long time ago19:07
pabelangerOh, I didn't realize that19:08
corvuswe restarted zuul yesterday19:08
corvusthe only changes between then and now are sorting autohold lists, adding 2.9, and defaulting to 2.819:08
corvusi will force-merg 69719:09
clarkbis 697 a pin to 2.7?19:10
openstackgerritMerged openstack/project-config master: Set default-ansible-version to 2.7 for all tenant (minus zuul)  https://review.opendev.org/67669719:10
fungiclarkb: on 3 out of 4 zuul tenants, yes19:10
corvusclarkb: ^ yes19:10
corvusnow i wonder if we should restart the scheduler again19:11
fungionly the zuul tenant is keeping the version increase from default19:11
corvusjust to re-run all those failing jobs19:11
mnaserhttps://docs.ansible.com/ansible/2.8/reference_appendices/interpreter_discovery.html seems to exist in 2.8 docs but not in 2.719:11
corvuswhich means, likely, that the first change the zuul tenant needs to merge is a fix to the siblings thing19:11
corvusclarkb, fungi: should i do a restart to re-run currently failing jobs?19:12
fungiit's a tough call, but yeah i guess if you're up for it19:12
corvuswill do19:12
clarkbcorvus: ya I think that is probably the friendliest user thing19:12
clarkbtyty19:12
fungii'm happy to help if there's anything for me to pitch in on there19:12
corvusi manually edited the file in 676697 as well19:14
pabelangerclarkb: corvus: fungi: mnaser: EmilienM: https://etherpad.openstack.org/p/CQgvHEzs3x should show reason for fails. Jobs bumped to ansible 2.8, which now has ansible_python_interpreter as auto (ansible 2.8) and likely first time openstack content is running under python3 for jobs19:14
EmilienMpabelanger: ohai19:15
mnaseri fixed a few py3 things the other time in tox_install_sibling_packages but i guess that wasnt all19:15
fungipabelanger: thanks, that helps19:15
EmilienMpabelanger++ corvus++ thanks for the fixes :)19:15
pabelangeranother option, is to force ubuntu-bionic in nodepool to python2, until we know python3 ansible works there19:16
corvusre-enqueueing19:18
corvuspabelanger: to be clear, tox-siblings isn't openstack, it's in zuul-jobs.  so it seems whatever testing of that which happens in the zuul tenant is insufficient19:19
pabelanger+1 can look to see why it didn't break19:20
corvuswe may not typically use any siblings19:20
corvusit looks like the 2.7 pin is good19:21
corvusi've seen at least one tox job pass the siblings point19:21
EmilienMcan we recheck already or should we wait?19:22
corvusEmilienM: the re-enqueue is still in progress, so maybe wait just a bit?  unless you want to jump the queue :)19:23
EmilienMno no, we'll wait19:23
openstackgerritPaul Belanger proposed zuul/zuul master: Update tox-docs to ansible 2.9 job  https://review.opendev.org/69831619:30
TheJuliais zuul's web interface happy?19:33
fungiTheJulia: it ought to be now19:34
johnsomYeah, down again19:34
johnsomStuck "Fetching info..." for me19:34
clarkbpossible that zuul-web needed to be restarted after the renqueue19:34
TheJulialikewise19:34
fungioh, maybe zuul-web needed a restart following the19:34
fungiyeah19:34
TheJuliaIt was working like 10 minutes ago19:34
TheJuliamaybe... 15, I'm loosing track of time due to a conference call19:34
corvusno it's just slow19:35
johnsomLooks like all the jobs restarted again too19:35
TheJuliathere it goes!19:35
corvusit managed to win the opportunity to do a full reconfig during a re-enqueue19:35
corvusEmilienM: re-enqueue is done19:35
EmilienMok thanks19:36
*** lbragstad_ is now known as lbragstad19:36
*** igordc has joined #openstack-infra19:39
*** gmann is now known as gmann_afk19:40
*** eharney has quit IRC19:55
*** jklare has quit IRC19:57
*** jklare has joined #openstack-infra20:01
clarkbianw: there is a dib question on openstack-discuss. I know we successfully install grub things on debuntu with our images and they are bootable. Do you know if this is a rhel/fedora problem?20:02
clarkbianw: hrm looks like bionic images run grub-mkconfig not grub2-mkconfig though I expect they are actually the same system under the hood?20:05
openstackgerritPaul Belanger proposed zuul/zuul master: Add upgrade note about ansible_python_interpreter  https://review.opendev.org/69831820:07
*** hashar has joined #openstack-infra20:07
fungiclarkb: probably. i can't imagine bionic has grub v1 even available for it20:07
clarkbya20:08
clarkbI'm working on a response now to get more info20:08
*** ralonsoh has quit IRC20:10
*** rcernin has joined #openstack-infra20:16
*** pcaruana has quit IRC20:16
openstackgerritMerged openstack/project-config master: Move security site to AFS publishing  https://review.opendev.org/68158420:21
* clarkb finds lunch20:21
*** pkopec has quit IRC20:26
ianwclarkb: hrmmm, i feel like there might be a bugzilla on this too20:29
openstackgerritPaul Belanger proposed zuul/zuul master: Add upgrade note about ansible_python_interpreter  https://review.opendev.org/69831820:34
*** Goneri has quit IRC20:38
ianwi'm thinking of rhbz#164791520:40
*** gfidente|afk has quit IRC20:51
openstackgerritPaul Belanger proposed zuul/zuul master: Add additional info for executor.merge_jobs release note  https://review.opendev.org/69832420:59
*** eharney has joined #openstack-infra21:02
*** jtomasek has quit IRC21:02
*** smcginnis has joined #openstack-infra21:05
*** jaosorior has joined #openstack-infra21:05
*** kjackal has quit IRC21:13
*** goldyfruit_ has quit IRC21:24
*** adriant has joined #openstack-infra21:26
*** mriedem has quit IRC21:29
*** goldyfruit_ has joined #openstack-infra21:30
*** hashar has quit IRC21:59
*** jaosorior has quit IRC22:01
ianw"2019-12-10 20:52:24,434 DEBUG nodepool.NodeLauncher: [node: 0000000000] Serious errors were found while checking the disk drive for /."22:02
ianwthis seems to be on trusty nodes for https://zuul.opendev.org/t/openstack/build/93729cbea2144cf68528cf8256e0645c/log/nodepool/nodepool-launcher.log ...22:02
ianwhttps://zuul.opendev.org/t/openstack/build/2fe5bae4a17245cfaf708015b4f3a0ed/log/nodepool/nodepool-launcher.log another instance22:03
*** mriedem has joined #openstack-infra22:05
ianwhrrm, it looks like the idea it is actaully a fsck error is a bit of red herring, and is probably related to mounting the root disk22:06
*** ramishra has quit IRC22:06
*** slaweq has quit IRC22:10
clarkbianw: I got that locally too it had to do with the grub install iirc22:11
clarkbI basically had to manually rerun the grub install then it worked iirc22:11
*** nicolasbock has quit IRC22:12
ianwhrmmm, so this is switching the base builder to bionic from xenial ... the build logs look exactly the same22:14
clarkbya I want to say my problem originated in a similar spot22:17
clarkbbut was a while back22:17
*** efried_afk is now known as efried22:25
openstackgerritClark Boylan proposed zuul/zuul-jobs master: Fix python3 compat in tox siblings handling  https://review.opendev.org/69833522:44
ianwwell i can recreate it at least :/22:47
*** apetrich has quit IRC22:54
*** tkajinam has joined #openstack-infra23:05
*** gmann_afk is now known as gmann23:06
ianwthis is somehow on the right track -- https://askubuntu.com/questions/468846/permanent-grub-edit-from-ro-to-rw23:06
ianwswitching to rw does let it boot23:06
openstackgerritClark Boylan proposed zuul/zuul-jobs master: Fix python3 compat in tox siblings handling  https://review.opendev.org/69833523:07
*** slaweq has joined #openstack-infra23:08
*** rlandy is now known as rlandy|bbl23:13
*** slaweq has quit IRC23:14
*** rh-jelabarre has quit IRC23:15
*** mriedem has quit IRC23:17
openstackgerritClark Boylan proposed zuul/zuul-jobs master: Fix python3 compat in tox siblings handling  https://review.opendev.org/69833523:27
*** goldyfruit_ has quit IRC23:30
*** Goneri has joined #openstack-infra23:35
*** Goneri has quit IRC23:40
*** dchen has joined #openstack-infra23:42
ianwthe grub.cfg between a bionic build and a xenial build looks the same :/23:42
*** rf0lc0 has quit IRC23:47
openstackgerritJames E. Blair proposed zuul/nodepool master: WIP: Add Google Cloud provider  https://review.opendev.org/69834223:47
clarkbianw: could it be something to do with the filesystem layout or partition table?23:49
clarkbI guess if changing the kernel flag to rw fixes it then probably not?23:49
*** rf0lc0 has joined #openstack-infra23:49
ianwi wonder if it's initrd generation, and something leaking through from the host's /sys or /proc23:49
clarkboh that would be fun23:49
ianwmy desire  to spend hours debugging this is limited :/23:50
ianwcan we ditch trusty yet?23:50
clarkbjust about I think wiki and static are the main things23:50
clarkbstatic is on its way out and I'm not sure how much testing we even do for wiki on trusty?23:51
clarkbI think all of that testing side is pivotted to xenial now23:51
*** harlowja has quit IRC23:54
ianwclarkb: https://opendev.org/openstack/project-config/src/branch/master/zuul.d/projects.yaml has an unfortunate number of hits for "-trusty"23:55
openstackgerritClark Boylan proposed opendev/system-config master: Switch nodes to xenial  https://review.opendev.org/69834323:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!