Thursday, 2020-06-18

openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640200:03
*** rfolco|rover has joined #openstack-infra00:05
*** matt_kosut has joined #openstack-infra00:06
*** matt_kosut has quit IRC00:10
*** jamesmcarthur has joined #openstack-infra00:10
*** Goneri has quit IRC00:22
*** jamesmcarthur has quit IRC00:24
*** rfolco|rover has quit IRC00:47
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640200:55
*** jamesmcarthur has joined #openstack-infra00:58
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640200:58
*** jamesmcarthur has quit IRC01:00
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:01
*** HenryG has quit IRC01:04
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:11
*** jamesmcarthur has joined #openstack-infra01:14
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:19
*** rfolco|rover has joined #openstack-infra01:23
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:26
*** HenryG has joined #openstack-infra01:29
*** pkopec has quit IRC01:33
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:41
*** jamesmcarthur has quit IRC01:43
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640201:51
*** jamesmcarthur has joined #openstack-infra02:00
*** markmcclain has quit IRC02:01
*** yamamoto has joined #openstack-infra02:01
*** markmcclain has joined #openstack-infra02:02
*** tinwood has quit IRC02:08
*** tinwood has joined #openstack-infra02:10
*** lbragstad has quit IRC02:21
*** yamamoto has quit IRC02:26
*** yamamoto has joined #openstack-infra02:27
*** yamamoto has quit IRC02:27
*** yamamoto has joined #openstack-infra02:27
*** apetrich has quit IRC02:41
*** xinranwang_ has joined #openstack-infra02:43
*** rcernin has quit IRC02:48
*** Lucas_Gray has quit IRC02:55
*** rcernin has joined #openstack-infra02:59
*** rcernin has quit IRC03:05
*** armax has quit IRC03:17
*** rcernin has joined #openstack-infra03:20
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640203:21
*** rcernin has quit IRC03:22
*** rcernin has joined #openstack-infra03:22
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [FOR DISCUSSION] Revert "Ensure wheel exists for build-release-python"  https://review.opendev.org/73640203:31
*** psachin has joined #openstack-infra03:37
*** yamamoto has quit IRC03:41
*** yamamoto has joined #openstack-infra03:49
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [WIP] Revert "Ensure wheel exists for build-release-python"; move to ensure-pip  https://review.opendev.org/73640203:57
openstackgerritIan Wienand proposed zuul/zuul-jobs master: [WIP] Revert "Ensure wheel exists for build-release-python"; move to ensure-pip  https://review.opendev.org/73640204:04
openstackgerritIan Wienand proposed zuul/zuul-jobs master: Partial revert "Ensure wheel exists for build-release-python"; move to ensure-pip  https://review.opendev.org/73640204:19
*** evrardjp has quit IRC04:33
*** evrardjp has joined #openstack-infra04:33
*** jamesmcarthur has quit IRC04:52
*** jamesmcarthur has joined #openstack-infra04:52
*** ysandeep|away is now known as ysandeep04:58
*** jamesmcarthur has quit IRC04:58
*** ykarel|away is now known as ykarel05:06
*** rlandy|bbl has quit IRC05:08
*** ociuhandu has joined #openstack-infra05:21
*** ociuhandu has quit IRC05:26
*** jamesmcarthur has joined #openstack-infra05:26
*** jamesmcarthur has quit IRC05:38
*** lmiccini has joined #openstack-infra05:41
*** udesale has joined #openstack-infra05:42
*** eolivare has joined #openstack-infra05:44
*** markvoelker has joined #openstack-infra05:51
*** markvoelker has quit IRC05:55
openstackgerritOpenStack Proposal Bot proposed openstack/project-config master: Normalize projects.yaml  https://review.opendev.org/73643806:04
*** matt_kosut has joined #openstack-infra06:07
openstackgerritMerged zuul/zuul-jobs master: Fix ansible-lint rules tests  https://review.opendev.org/73638706:11
*** matt_kosut has quit IRC06:12
*** matt_kosut has joined #openstack-infra06:18
*** yolanda has quit IRC06:31
*** yolanda has joined #openstack-infra06:36
openstackgerritMerged openstack/project-config master: Normalize projects.yaml  https://review.opendev.org/73643806:40
*** noonedeadpunk has joined #openstack-infra06:41
*** rpittau|afk is now known as rpittau06:43
*** dklyle has quit IRC06:44
*** gfidente|afk is now known as gfidente06:44
AJaegerelod: are you in #openstack-oslo? We can discuss oslo.messaging further there.06:49
AJaegerelod: I think https://review.opendev.org/736248 is fine now - but I don't know why the py36 and py38 tests timeout, I see them timeout already on https://review.opendev.org/#/c/734489/ , so this looks unrelated to the pip/virtualenv/tox changes. Could you investigate further, please? - and feel free to take over my change.06:49
*** hashar has joined #openstack-infra06:54
*** xek has joined #openstack-infra07:00
*** amoralej|off is now known as amoralej07:01
*** apetrich has joined #openstack-infra07:04
*** slaweq has joined #openstack-infra07:07
*** jcapitao has joined #openstack-infra07:16
*** ralonsoh has joined #openstack-infra07:21
*** tosky has joined #openstack-infra07:25
*** elod has quit IRC07:26
*** elod has joined #openstack-infra07:33
*** pkopec has joined #openstack-infra07:38
*** auristor has quit IRC07:42
elodAJaeger: thanks! I had some errands to run, plus meeting. I'll look into the issue. :)07:44
AJaegerthanks, elod07:49
*** rcernin_ has joined #openstack-infra07:54
*** rcernin has quit IRC07:54
*** jpena|off is now known as jpena07:57
*** ykarel is now known as ykarel|lunch08:01
*** Lucas_Gray has joined #openstack-infra08:12
*** udesale_ has joined #openstack-infra08:19
*** elod has quit IRC08:19
*** rcernin_ has quit IRC08:20
*** udesale has quit IRC08:21
*** elod has joined #openstack-infra08:26
*** dtantsur|afk is now known as dtantsur08:29
*** ysandeep is now known as ysandeep|lunch08:30
*** yamamoto has quit IRC08:42
*** yamamoto has joined #openstack-infra08:42
*** ociuhandu has joined #openstack-infra08:42
*** rcernin_ has joined #openstack-infra08:45
*** rcernin_ has quit IRC08:50
*** elod has quit IRC09:00
*** ykarel|lunch is now known as ykarel09:03
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add linting rule to enforce no-same-owner policy  https://review.opendev.org/72764209:06
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Add linting rule to enforce no-same-owner policy  https://review.opendev.org/72764209:08
*** yamamoto has quit IRC09:12
*** ysandeep|lunch is now known as ysandeep09:12
*** yamamoto has joined #openstack-infra09:13
*** yamamoto has quit IRC09:13
*** ccamacho has quit IRC09:16
*** elod has joined #openstack-infra09:17
*** elod has quit IRC09:19
*** yamamoto has joined #openstack-infra09:23
*** elod has joined #openstack-infra09:25
*** ysandeep is now known as ysandeep|afk09:35
*** jamesmcarthur has joined #openstack-infra09:35
*** yamamoto has quit IRC09:40
*** jamesmcarthur has quit IRC09:49
*** ociuhandu has quit IRC09:52
*** ociuhandu has joined #openstack-infra09:59
*** tkajinam has quit IRC10:05
*** rpittau is now known as rpittau|bbl10:06
*** ysandeep|afk is now known as ysandeep10:14
*** yamamoto has joined #openstack-infra10:14
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Drop support for ansible 2.6  https://review.opendev.org/72715810:15
*** yamamoto has quit IRC10:20
*** yamamoto has joined #openstack-infra10:20
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Drop support for ansible 2.7  https://review.opendev.org/72741010:23
*** xek has quit IRC10:34
*** xek has joined #openstack-infra10:34
*** jcapitao is now known as jcapitao_lunch10:37
*** yamamoto has quit IRC10:43
*** yamamoto has joined #openstack-infra10:44
*** yamamoto has quit IRC10:44
*** rcernin_ has joined #openstack-infra10:47
*** yamamoto has joined #openstack-infra10:48
*** yamamoto has quit IRC10:53
*** yamamoto has joined #openstack-infra10:54
*** yamamoto has quit IRC10:59
*** udesale_ has quit IRC11:12
*** yamamoto has joined #openstack-infra11:16
*** yamamoto has quit IRC11:20
*** ccamacho has joined #openstack-infra11:22
*** markvoelker has joined #openstack-infra11:24
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: nit: Fix missing word in roles/ensure-pip/README.rst  https://review.opendev.org/73661711:25
*** jcapitao_lunch is now known as jcapitao11:27
*** derekh has joined #openstack-infra11:27
*** markvoelker has quit IRC11:29
*** yamamoto has joined #openstack-infra11:34
*** jpena is now known as jpena|lunch11:38
*** jcapitao has quit IRC11:46
openstackgerritPratik Raj proposed openstack/cookiecutter master: optimize size and time using --no-cache-dir  https://review.opendev.org/73664911:47
*** jcapitao has joined #openstack-infra11:49
*** ociuhandu has quit IRC11:50
*** rlandy has joined #openstack-infra11:50
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: phoronix-test-suite: extract ensure- role from run playbook  https://review.opendev.org/73636811:54
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: Add ensure pre-run policy to ansible-lint  https://review.opendev.org/73636711:54
openstackgerritTristan Cacqueray proposed zuul/zuul-jobs master: Add ensure pre-run policy to ansible-lint  https://review.opendev.org/73636711:55
*** amoralej is now known as amoralej|lunch12:06
openstackgerritPratik Raj proposed openstack/hacking master: optimize size and time using --no-cache-dir  https://review.opendev.org/73668112:06
*** yamamoto has quit IRC12:12
*** rpittau|bbl is now known as rpittau12:20
AJaegerdtantsur: just abandon those changes ^, not worth a -2.12:21
AJaegerdtantsur: let's free the testing resources ;)12:21
dtantsurgood call12:21
AJaegerdtantsur: FYI, mordred and smcginnis have already abandoned a few and the account was disabled for now.12:22
dtantsursigh12:22
dtantsurthank you folks!12:22
dtantsurwe'll abandon whatever we have ACL for12:22
AJaegerthanks12:23
*** auristor has joined #openstack-infra12:26
mordreddtantsur: I have mass-abandoned them all12:31
*** derekh has quit IRC12:33
dtantsurk, thx!12:33
*** jpena|lunch is now known as jpena12:38
*** derekh has joined #openstack-infra12:40
*** ysandeep is now known as ysandeep|brb12:47
openstackgerritMonty Taylor proposed zuul/zuul-jobs master: Partial revert "Ensure wheel exists for build-release-python"; move to ensure-pip  https://review.opendev.org/73640212:52
fungiwe also set the account inactive temporarily until someone has an opportunity to reach out to the user and explain the problem with proposing thousands of patches without coordinating with the community12:55
*** noonedeadpunk is now known as noonedeadpunk_12:57
AJaegerfungi: I send the user brief mail directly where I pointed out the coordination. But no result so far.12:59
fungiyep, it may be worthwhile for diablo_rojo, gmann, tonyb, or others active in the fc sig to reach out as well13:05
fungimaybe get them pushing fewer but more worthwhile changes13:05
*** amoralej|lunch is now known as amoralej13:08
fungiosf profile says they're an individual member, but unaffiliated13:09
fungihttps://github.com/Rajpratik71 looks to probably be the same person13:11
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Drop support for ansible 2.7  https://review.opendev.org/72741013:11
*** lbragstad has joined #openstack-infra13:16
*** psachin has quit IRC13:20
*** sshnaidm is now known as sshnaidm|mtg13:23
openstackgerritSean McGinnis proposed openstack/project-config master: End project gating on openstack/mox3  https://review.opendev.org/73671213:27
AJaegerfungi, he just answered me and apologized13:27
*** armax has joined #openstack-infra13:27
*** yamamoto has joined #openstack-infra13:28
*** ysandeep|brb is now known as ysandeep13:29
fungiAJaeger: cool, if he's stopping the mass upload and going to start discussing with the community at large, then i'm happy to reenable the account13:30
fungiAJaeger: did he indicate he would stop pushing that series of patches?13:32
openstackgerritJens Harbott (frickler) proposed zuul/zuul-jobs master: Fix with_* loop for ansible 2.9  https://review.opendev.org/73671413:33
*** yamamoto has quit IRC13:34
AJaegerfungi: I'll ask - he (or she?) was vague on that, let's be sure13:34
fungithanks, i'm holding off switching the account back to active yet in that case13:35
AJaegerfungi: uploads are stopped, just got a reply13:46
fungicool, reenabling their account, thanks!!!13:46
*** jamesmcarthur has joined #openstack-infra13:46
*** Goneri has joined #openstack-infra13:47
AJaegerfungi: will tell him/her13:47
rosmaitai may have missed the memo on this, but is there a problem with tempest-full on stable/rocky?  https://zuul.opendev.org/t/openstack/builds?job_name=tempest-full&branch=stable%2Frocky13:51
*** jamesmcarthur has quit IRC13:51
rosmaitai saw on the ML that there are grenade problems pre-stein, but i think this is different?13:51
gmannrosmaita: uwsgi issue on rocky or less are not fixed yet so tempest jobs will be failing there.13:52
rosmaitagmann: thanks13:54
*** Goneri has quit IRC13:55
fungiit's probably safe to drop devstack/tempest jobs from em branches if that makes things easier13:56
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: nit: Fix missing word in roles/ensure-pip/README.rst  https://review.opendev.org/73661713:57
rosmaitafungi: yeah, will probably have to do that, which is kind of worrisome13:57
fungithough i would say working devstack/tempest is required to keep a branch in "maintained" state, and if you can no longer run them then the branch should transition to extended maintenance13:57
rosmaitagmann: whatever happened with your proposal to EOL ocata?13:57
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: phoronix-test-suite: extract ensure- role from run playbook  https://review.opendev.org/73636813:58
openstackgerritAndreas Jaeger proposed zuul/zuul-jobs master: Add ensure pre-run policy to ansible-lint  https://review.opendev.org/73636713:58
gmannrosmaita: i think we are good to do that, i will follow up after greande issue are resolved and stable gate is back13:58
rosmaitagmann: thanks, i know you have a lot on your plate these days!13:58
gmannrosmaita: currently grenade multinode jobs are not happy so we are trying to backport the grenade-zuulv3 series to train to fix it.13:59
rosmaitagmann: one more question -- is your advice to drop tempest-full from stable/r and stable/q for now until the uwsgi thing gets worked out?13:59
*** dklyle has joined #openstack-infra14:00
*** jamesmcarthur has joined #openstack-infra14:00
gmannrosmaita: i will say not to drop as dropping means all integration testing needs to be dropped (which i feel not good).14:01
*** rfolco|rover is now known as rfolco14:01
rosmaitagmann: yeah, it gives me a bad feeling too14:02
gmannrosmaita: we are trying to fix on rocky with this but seems more work needed- https://review.opendev.org/#/c/735615/14:03
rosmaitagmann: thanks for the link14:04
*** Goneri has joined #openstack-infra14:08
openstackgerritMerged zuul/zuul-jobs master: Partial revert "Ensure wheel exists for build-release-python"; move to ensure-pip  https://review.opendev.org/73640214:12
*** rcernin_ has quit IRC14:14
openstackgerritSorin Sbarnea (zbr) proposed zuul/zuul-jobs master: tox: allow tox to be upgraded  https://review.opendev.org/69005714:18
openstackgerritMerged zuul/zuul-jobs master: nit: Fix missing word in roles/ensure-pip/README.rst  https://review.opendev.org/73661714:19
openstackgerritSean McGinnis proposed openstack/project-config master: End project gating on openstack/mox3  https://review.opendev.org/73671214:20
*** hashar has quit IRC14:21
*** noonedeadpunk_ is now known as noonedeadpunk14:29
openstackgerritSean McGinnis proposed openstack/project-config master: End project gating on openstack/mox3  https://review.opendev.org/73671214:29
*** Goneri has quit IRC14:35
smcginnisAJaeger: It's obviously been awhile since I've done one of these repo retirements. ;)14:38
clarkbgmann: smcginnis re uwsgi one alternate option is adding it to global requirements which will result in us building wheels from it, then we can pip install uwsgi as an install method14:41
clarkbthat may work well for both old and current branches14:41
AJaegersmcginnis: no problem - every time we find that we can improve docs ;)14:41
smcginnisclarkb: We should be able to get that added quickly if we want to go that route.14:41
gmannclarkb: smcginnis for rocky and less, i think that is easy way to move forward.14:42
openstackgerritMerged zuul/zuul-jobs master: phoronix-test-suite: extract ensure- role from run playbook  https://review.opendev.org/73636814:50
*** ociuhandu has joined #openstack-infra14:50
*** Goneri has joined #openstack-infra14:51
*** ociuhandu has quit IRC14:55
*** jamesmcarthur has quit IRC15:04
AJaegersmcginnis: you pushed two chagnes - will you push the other two for mox3 retirement as well?15:10
smcginnisAJaeger: Yes. A little delayed. Ran into internal meetings, so those will be coming soon.15:13
AJaegersmcginnis: I can wait - just wanted to check that you are aware. Thanks15:14
smcginnisYep. Definitely on the top of my todo list.15:14
*** jcapitao has quit IRC15:17
*** lmiccini has quit IRC15:17
*** Lucas_Gray has quit IRC15:29
*** jackedin has joined #openstack-infra15:32
*** slaweq has quit IRC15:33
lbragstadi'm sure this has been asked, and i checked the mailing list, but do we need to patch requirements jobs to include pip now?15:35
clarkblbragstad: you'll need to be more specific than that15:37
lbragstadhttps://zuul.opendev.org/t/openstack/build/0caf221373364028b2dbd02309f8658c15:37
AJaegerlbragstad: should be fixed as of 20 mins or so15:37
AJaegerlbragstad: please recheck15:37
lbragstadAJaeger clarkb ok - perfect15:37
*** ykarel is now known as ykarel|away15:40
*** ociuhandu has joined #openstack-infra15:40
*** sshnaidm|mtg is now known as sshnaidm|ruck15:41
*** hashar has joined #openstack-infra15:42
*** ysandeep is now known as ysandeep|away15:43
*** rlandy is now known as rlandy|ruck215:44
*** bhagyashris is now known as bhagyashris|away15:49
openstackgerritSean McGinnis proposed openstack/project-config master: Complete retirement of mox3  https://review.opendev.org/73676015:49
*** gyee has joined #openstack-infra15:50
openstackgerritMerged openstack/project-config master: Remove plain images  https://review.opendev.org/73577815:51
*** priteau has joined #openstack-infra15:52
*** amoralej is now known as amoralej|off15:55
openstackgerritAlbin Vass proposed zuul/zuul-jobs master: Deprecate default tox_envlist: venv  https://review.opendev.org/72683016:00
openstackgerritJeremy Stanley proposed openstack/project-config master: publish-openstack-python-branch-tarball: use py3  https://review.opendev.org/73676516:09
fungiAJaeger: mordred: ^ another place where we needed to add a release_python override16:09
AJaegerfungi: wow, thanks! let me review that...16:10
fungiit was falling through to the default of "python" in https://opendev.org/zuul/zuul-jobs/src/branch/master/roles/build-python-release/tasks/main.yaml16:10
AJaegerfungi: will using python3 be a problem for older stable branches?16:11
fungiwhich is why it couldn't find setuptools (and would likely have also failed to find wheel if it had made it much further)16:11
fungiAJaeger: i'm honestly not sure. if it is, we'll need to work out how to set branch-specific rules on which version of python we want ensure-pip to pull in16:11
fungiinto16:12
fungibut basically right now publish-openstack-python-branch-tarball is assuming python(2) everywhere and ensure-pip is assuming only python316:13
*** jamesmcarthur has joined #openstack-infra16:19
mordredfungi, AJaeger I do not believe it should be a problem16:20
mordred(on stable branches)16:20
mordredit's fine for python3 to build a tarball of python2 code - we don't run any code from the projects in question when we build their tarballs16:23
AJaegermordred: great - then let's merge it ;) Thx16:24
mordredAJaeger: done!16:32
AJaeger;916:32
AJaeger;)16:32
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593216:40
*** jamesmcarthur has quit IRC16:43
*** rlandy|ruck2 is now known as rlandy|ruck2|brb16:45
openstackgerritMerged openstack/project-config master: publish-openstack-python-branch-tarball: use py3  https://review.opendev.org/73676516:46
*** armax has quit IRC16:48
*** armax has joined #openstack-infra16:49
*** gfidente is now known as gfidente|afk16:49
*** jamesmcarthur has joined #openstack-infra16:51
*** sshnaidm|ruck is now known as sshnaidm|off16:52
openstackgerritMerged openstack/project-config master: End project gating on openstack/mox3  https://review.opendev.org/73671216:54
openstackgerritMerged zuul/zuul-jobs master: Fix with_* loop for ansible 2.9  https://review.opendev.org/73671416:54
*** sreejithp has joined #openstack-infra16:56
*** User0192 has joined #openstack-infra16:56
*** User0192 has quit IRC16:57
*** rpittau is now known as rpittau|afk17:00
*** derekh has quit IRC17:02
*** jackedin has quit IRC17:03
*** rlandy|ruck2|brb is now known as rlandy|ruck217:04
*** hashar has quit IRC17:05
*** jamesmcarthur has quit IRC17:08
*** jamesmcarthur has joined #openstack-infra17:08
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593217:09
*** dtantsur is now known as dtantsur|afk17:10
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593217:15
*** jpena is now known as jpena|off17:21
*** rchanter has quit IRC17:24
openstackgerritAhmad Mahmoudi proposed openstack/openstack-zuul-jobs master: (fix) Changed pip to pip3  https://review.opendev.org/73678617:29
*** eolivare has quit IRC17:31
*** michael-beaver has joined #openstack-infra17:32
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593217:33
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593217:38
openstackgerritAhmad Mahmoudi proposed openstack/openstack-zuul-jobs master: (fix) Changed pip to pip3  https://review.opendev.org/73678617:38
openstackgerritMerged openstack/project-config master: Readd publish-to-pypi for neutron-fwaas and dashboard  https://review.opendev.org/73585017:56
*** ralonsoh has quit IRC17:57
openstackgerritAndreas Jaeger proposed openstack/project-config master: Fix translation jobs  https://review.opendev.org/73679118:05
*** hashar has joined #openstack-infra18:09
*** factor__ has quit IRC18:11
*** factor__ has joined #openstack-infra18:11
AJaegerconfig-core, please review another pip/virtualenv fallout ^18:18
clarkblooking18:19
AJaegerthanks18:23
openstackgerritMerged openstack/project-config master: Fix translation jobs  https://review.opendev.org/73679118:39
noonedeadpunkhi there!18:43
noonedeadpunkhave some interesting at centos8 hold I got... Which I dunno what, and how appeared (and not having that on my any centos8 sandbox)18:43
noonedeadpunkmaybe you have any guess what it could be18:43
noonedeadpunkhttp://paste.openstack.org/show/794972/18:43
openstackgerritJeremy Stanley proposed zuul/zuul-jobs master: Simplify twine invocation for PyPI uploads  https://review.opendev.org/73593218:45
clarkbnoonedeadpunk: interactive login and non interactive login can hav edifferent rc/profile content18:45
clarkbnoonedeadpunk: my hunch is that those paths differ on centos8 and it affects the umask18:45
clarkbchecking openstack/project-config where we define our image builds I don't see any explicit use of umask there so I doubt we are doing it18:46
openstackgerritAhmad Mahmoudi proposed zuul/zuul-jobs master: (fix) - Added tox location to PATH  https://review.opendev.org/73680118:47
fungiyeah, noninteractive logins don't source the same shell configuration18:51
noonedeadpunkany way to check what's used?18:55
noonedeadpunkjust grepping for umask through /etc/ doesn't give any 07718:55
clarkbnoonedeadpunk: you need to start with your user's shell (likely bash in this case)18:55
clarkbthen I always have to read the man page to remember which is interactive login and which isn't18:56
clarkbthen check the files in /etc/ and $HOME18:56
noonedeadpunknothing exists in HOME18:56
noonedeadpunkin terms of profile, bashrc, etc18:56
clarkb"When bash is invoked as an interactive login shell, or as a non-interactive shell with the --login option, it first reads and executes commands from  the  file  /etc/profile,  if that  file  exists.   After reading that file, it looks for ~/.bash_profile, ~/.bash_login, and ~/.profile, in that order, and reads and executes commands from the first one that exists and is readable."18:57
clarkbI would check /etc/profile18:57
mordredyeah - although ansible overrides some of that18:57
fungino ~root/.bashrc or ~root/.profile on the node?18:57
mordredso, for instance, just putting a PATH in a ~/.bashrc doesn't necessarily fix ansible tasks18:58
noonedeadpunkfungi: nope http://paste.openstack.org/show/794973/18:58
clarkbmordred: in noonedeadpunk's earlier paste there is no ansible. Just interactive and non interactive shell use running the umask command with different outputs18:59
fungissh will apparently also read ~/.ssh/environment18:59
noonedeadpunkmordred: eventually at the moment I just try ssh to localhost and get valid umask - ansible faces the same thing, but I gueass once fixed for manual run will be fixed for ansible as well18:59
clarkbon my suse machine /etc/profile has a whole comment block on how pam sets umask19:00
clarkbso ya I would definitely check /etc/profile for similar on centos819:00
noonedeadpunkfungi: there are only keys (like public/private) and known_hosts19:00
fungibut also yes, great point, libpam can be responsible too19:00
noonedeadpunkclarkb: I did that and diff pretty minimal... http://paste.openstack.org/show/794974/19:01
noonedeadpunkbtw there is umask include with pam19:01
noonedeadpunk`session optional                   pam_umask.so silent`19:01
clarkbnoonedeadpunk: don't diff it, read it19:02
clarkbnoonedeadpunk: my local /etc/profile has like a 10 line comment on how umask is sorted out for the system19:02
mordrednod19:02
clarkbyou want to find that info for the centos8 system19:02
noonedeadpunkaccording to it it should set `umask 022`19:02
clarkbnoonedeadpunk: which is what you saw for interactive login so that is good19:03
fungithen that's consistent with your observation19:03
noonedeadpunkyeah...19:03
fungiinteractive logins source profile, noninteractive connections do not19:03
clarkbmy hunch is that the pam umask module is setting it to 0022 for interactive login by default and 0077 for non interactive19:04
noonedeadpunkok, pam version differs on my sandbox and CI image19:06
clarkbnoonedeadpunk: our images may not be centos 8.2 yet as our builders ran out of disk19:07
clarkbI expect if that is the case they'll be updated soon to 8.2 as I fixed the disk issue19:07
noonedeadpunkeventually it's 8.2, but may sandbox which I'm reffering to is 8.119:08
noonedeadpunk*my19:08
noonedeadpunkwill try to update it and see if behaviour will be broken....19:09
clarkbfrom man login.defs: The file mode creation mask is initialized to this value. If not specified, the mask will be initialized to 022.19:11
clarkbthat seems to be where my system is getting it from19:11
fricklernoonedeadpunk: /etc/login.defs has "UMASK 077"19:11
clarkbbecause its not explicitly set anywhere else I can find it19:11
clarkbfrickler: that would explain it then19:11
noonedeadpunkfrickler: yes, it does19:12
noonedeadpunkbut it's the same for behaving normally sandbox19:12
fricklerlsb_release says 8.2.2004, so may be a change with 8.219:14
noonedeadpunkyeah, it's eventually hold 104.239.168.126 (so everyone has already keys on it)19:14
fricklerclarkb: the held node is 104.239.168.126 if you want to look there, /me disappears again19:14
clarkbfrickler: thanks. I'm still in recover from desktop crash mode but if this persists past lunch I'll probably do that19:15
noonedeadpunkok, updated sandbox to 8.2.2004 but it's still behaves ok19:16
noonedeadpunkfwiw root@199.19.213.4219:17
mordredwow. love those login warnings!19:19
noonedeadpunklol19:20
mordredI especially love that it prints the motd twice19:20
noonedeadpunkansible-hardening :)19:20
mordredso hard19:20
noonedeadpunkbtw, this shouldn't happe normally...19:20
mordredit's like a sign you post on your house saying "this house is protected by XXX security system"19:21
mordredmaybe it is - maybe it isn't - but you have a sign ;)19:21
noonedeadpunkok, so setting umask for pam.d resolve the issue19:21
mordred\o/19:21
noonedeadpunkbut um...19:21
noonedeadpunk why it even happen19:21
noonedeadpunkas setting it is not a hack... but...19:22
mordrednoonedeadpunk: it's possible some difference between the images we make the the image in your sandbox19:22
*** gmann is now known as gmann_afk19:22
clarkbnote that if you've got weird login due to ansible hardening that could change things like umask setup19:22
mordrednoonedeadpunk: like, perhaps whatever process was used to create yours is different and made a different setting in /etc/pam.d that we're not making19:22
clarkbsince this is affected by the login process19:23
noonedeadpunkbtw commenting out umask in /etc/login.defs also fixes it19:23
mordredor that - although I'd expect ansible-hardening to have the same impact on the sandbox as that node19:23
noonedeadpunkpam.d settings are equal19:23
mordredso my money would be on somethingw e are doing or not doing in dib19:23
mordrednoonedeadpunk: what is the source of your sandbox?19:23
noonedeadpunkand I was using just centos 8.1 cloud image19:23
mordredyeah - so that's going to have been built differently19:23
noonedeadpunk8.1.1911 to be specific19:24
mordredmaybe it's worth us investigating if there are things the centos cloud images do like that that we don't do in dib that might be important to do to make an expected centos image19:24
mordredOR19:24
mordredmaybe it's a good difference to be aware of in the ansible playbooks you're working on19:24
clarkbI mean if upstream wants a different umask they shouldn't set it in login.defs :)19:24
mordredclarkb: there are many choices people make that they shouldn't make :)19:25
clarkbchecking dib itself the only thing that touches login.defs is zypper elements19:25
mordredjust saying - if we're making base centos images that have some fundamental unexpected behavior liek that compared to "normal" centos images - maybe there's an easy fix dib-side19:25
clarkbI don't think dib or openstack/project-config do anything to modify login.defs19:25
* mordred isn't 100% sure it's a good idea to alter dib - just saying it's worth pondering19:26
noonedeadpunkeventually my sendbox has really equal /etc/login.defs19:26
clarkbnoonedeadpunk: ya so its possible they are adding something on topof that to undo the login.defs default19:26
clarkbif you grep umask in /etc/pam.d/ do you see anything that could explain it?19:27
clarkbyou can set umask options there19:27
clarkbyou can also set them in /etc/passwd gecos field19:27
noonedeadpunkbtw, has `mask=$(awk '/^UMASK/{gsub("#.*$", "", $2); print $2; exit}' /etc/login.defs)` in /etc/security/namespace.init19:27
clarkbnoonedeadpunk: is your testing on your sandbox doing a new namespace?19:29
clarkbif I'm reading that correctly its clearing out the umask value?19:29
clarkbI'm not super familarwith awk (I tend to use sed)19:29
* mordred uses commandline perl - which is really his only remaining use of perl19:29
noonedeadpunkoh, it only grabs it19:30
clarkbah ok just a logging action then19:30
*** yamamoto has joined #openstack-infra19:32
*** xinranwang_ has quit IRC19:33
noonedeadpunkironicly we already have a specific variable to override that lol19:34
noonedeadpunkok, thanks all for your time19:35
noonedeadpunkthat was really interesting.19:35
noonedeadpunkdespite reall difference is still unknown, there's an easy workaround that19:36
mordrednoonedeadpunk: sometimes a workaround is the best option19:36
noonedeadpunkyeah19:37
*** gmann_afk is now known as gmann19:37
*** yamamoto has quit IRC19:37
EmilienMdo you know an example of a project zuul layout running a tox job from another project?19:56
EmilienMe.g. project X running tox py38 job of project Y19:56
AJaegerEmilienM: requirements?19:57
EmilienMis that possible at the zuul job layer? or should i investigate something in tox.ini19:57
EmilienMmhh requirements indeed19:57
AJaegerEmilienM: openstackdocstheme19:57
EmilienMAJaeger: thanks19:57
AJaegerEmilienM: openstackdocstheme uses tox-docs, not py3819:57
AJaegerhttps://opendev.org/openstack/requirements/src/branch/master/.zuul.d/cross-jobs.yaml#L88 - py3619:58
AJaegerbut should be the same as py3819:58
AJaegerEmilienM: https://opendev.org/openstack/openstackdocstheme/src/branch/master/.zuul.yaml#L8-L19 is a better example, just change tox-docs to py38 and it should work...19:59
*** rlandy|ruck2 is now known as rlandy|ruck2|mtg20:00
EmilienMAJaeger: that's perfect20:01
EmilienMAJaeger: thank you20:01
*** gmann is now known as gmann_afk20:10
*** slaweq has joined #openstack-infra20:23
noonedeadpunkmordred: clarkb I got some info that it's a bug and will be fixed in 8.3...20:23
noonedeadpunk https://bugzilla.redhat.com/show_bug.cgi?id=183366420:26
openstackbugzilla.redhat.com bug 1833664 in shadow-utils "Regression in default file permission in RHEL 8.x as compared to RHEL 7.x when file is generated via a a program ran via su" [Urgent,Closed: duplicate] - Assigned to ipedrosa20:26
EmilienMAJaeger: thanks it works super fine for me :)20:27
EmilienMfor the record : https://review.opendev.org/#/c/73682320:28
clarkbnoonedeadpunk: we could probably have dib write the fixed login.defs until then20:28
*** rlandy|ruck2|mtg is now known as rlandy|ruck220:31
*** priteau has quit IRC20:34
* noonedeadpunk wondering if it's the way to montivate ppl to use centos stream...20:37
mordredEmilienM: that looks good20:40
EmilienMmordred: thanks for checking it :-)20:40
mordredEmilienM: note, in tripleoclient repo, you'll want to have tripleo-common in your requirements for tox_install_siblings to work right20:41
mordredEmilienM: looks like you do20:42
EmilienMgood to know20:43
* EmilienM first time doing this20:43
mordredEmilienM: that it's goign to do is the zuul tox job is going to notice that tripleo-common is in required-projects, and is going to notice that it's installed into the tox env20:44
mordredso it will, in this job, install the git checkout of tripleo-common into the tox env20:44
mordredEmilienM: fwiw, in the jobs I have for this between sdk, osc, osc-lib and cliff (oy) - we tend to put the job in the repo whose tests are going to be run - just to make it easy to keep straight in our heads - so in this case putting the job in the python-tripleoclient repo. BUT - it does not make _any_ difference - and you can (and should) use the job in both repos :)20:46
mordredanyway - that looks great20:46
EmilienMoh I see20:46
EmilienMso you would make the job layout in tripleoclient and not tripleo-common?20:47
EmilienMi could certainly do that20:47
*** hashar has quit IRC20:47
mordredyeah - just because it's mostly saying "run a tripleoclient tox job, but instead of using release tripleo-common, use git" - which feels like a tripleoclient tox job with a special config20:48
mordredbut there's seriously no actual functional difference20:49
*** rfolco has quit IRC20:52
*** haleyb has joined #openstack-infra20:55
*** xek has quit IRC20:56
openstackgerritMerged zuul/zuul-jobs master: Add linting rule to enforce no-same-owner policy  https://review.opendev.org/72764221:37
openstackgerritJeremy Stanley proposed openstack/project-config master: Add ensure-tox to pti-python-tarball  https://review.opendev.org/73684821:45
fungiEmilienM: a more direct example can likely be found in oslo repos where they run, say, nova's unit tests applying proposed changes to oslo libs... i'm not sure which of the oslo repos do that though21:52
funginoonedeadpunk: also in case nobody's mentioned it yet, you can download the images we build if you want to poke at them more directly: https://nb01.opendev.org/images/21:53
*** rcernin_ has joined #openstack-infra21:54
*** markvoelker has joined #openstack-infra21:58
*** markvoelker has quit IRC22:02
*** gmann_afk is now known as gmann22:04
*** tonyb has joined #openstack-infra22:05
*** sreejithp has quit IRC22:07
*** eharney has quit IRC22:08
*** armax has quit IRC22:09
*** rcernin_ has quit IRC22:13
*** slaweq has quit IRC22:13
*** tosky has quit IRC22:25
*** gfidente|afk has quit IRC22:29
noonedeadpunkfungi: oh, that is usefull!22:31
noonedeadpunkI guess you can release hold then.22:51
*** armax has joined #openstack-infra22:55
*** tkajinam has joined #openstack-infra23:00
mordrednoonedeadpunk, mnaser: I wonder if it would be useful at all (or even allowed) to mark our images in vexxhost as public. I guess the downside is that we can't delete the image in glance if some nova server is using it - so I imagine if someone booted directly from our uploads we might wind up with un-deleteable images23:10
mordredbut from our pov - they _are_ public data and other than logistics like that there's really no reason for them to not be available to people for a nova boot23:11
fungii suspect that would be the case, yes, we would be unable to clean up the images if there were bfv users of them in other tenants23:11
mordredyeah23:12
mordredalso - I have no idea how that even works - I think it's not possible for an unprivileged user to mark an image fully public iirc23:12
mordredsince that would pollute the global "openstack image list"23:13
fungii think it's configurable in policy?23:13
fungibut yes, unlikely to be enabled23:13
mordredfungi: the sad truth of openstack is that _everything_ is configurable in policy23:14
fungieven i'm configurable in policy23:14
fungibut i think i need to unconfigure myself for the evening and enjoy my far too expensive new air conditioner23:15
*** rcernin_ has joined #openstack-infra23:15
*** rcernin_ has quit IRC23:15
fungiit has fancy touch screen thermostats in each zone which i'm told i can connect to the internet... yeah not doing THAT23:15
*** rcernin has joined #openstack-infra23:16
clarkbyou have zones?23:16
fungias of today, yes23:16
mordredfungi: I feel like you should do an openpowermon install23:17
mordredseems like a thing you should have wired in to your house23:17
clarkbmy hvac system with AC on is either upstairs too hot and downstairs cool or upstairs cool and downstairs walk im freezer23:17
clarkbI just open windows as a rwsult23:17
fungiclarkb: mine was too. now they're independently dampered23:17
clarkbnice23:17
fungibasically one end of the house is a giant open space with lots of large windows, and the other end of the house is two floors of small closed-off rooms. needless to say those different areas of the house do not heat and cool the same23:19
fungi(and now they don't have to)23:19
clarkbI should look into that23:19
fungiwhat's worse, it was the east end of the house (bedrooms and bathrooms) vs the west end (living/dining/kitchen), so now one zone gets sun in the morning, the other gets sun in the afternoon. easy when they're independent23:20
fungibut also had them replace basically all the ductwork, the original ducts were falling apart. felt like a scene from brazil23:22
*** yamamoto has joined #openstack-infra23:34
*** yamamoto has quit IRC23:39
*** jamesmcarthur has quit IRC23:43
*** tetsuro has joined #openstack-infra23:47
*** rfolco has joined #openstack-infra23:58

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!