Sunday, 2016-08-21

openstackgerritOpenStack Proposal Bot proposed openstack/kolla: Updated from global requirements  https://review.openstack.org/35828700:04
*** sdake has quit IRC00:11
sbezverk_sdake: I think I figured out how to make ovs stable, but I think kolla folks will not going to like it ;-)00:14
*** dwalsh has joined #openstack-kolla00:14
*** dwalsh has quit IRC00:31
*** HyperJohnGraham has joined #openstack-kolla00:51
*** dave-mccowan has joined #openstack-kolla00:52
openstackgerritJeffrey Zhang proposed openstack/kolla: Remove log propagate configuration  https://review.openstack.org/35825100:54
*** HyperJohnGraham has quit IRC01:01
openstackgerritJeffrey Zhang proposed openstack/kolla: DO_NOT_MERGE: Use better URL for China  https://review.openstack.org/32906001:02
*** salv-orlando has joined #openstack-kolla01:15
*** salv-orl_ has quit IRC01:18
*** daneyon has joined #openstack-kolla01:29
*** daneyon has quit IRC01:34
*** v1k0d3n has joined #openstack-kolla01:46
*** v1k0d3n has quit IRC01:51
*** mark-casey has joined #openstack-kolla02:00
*** zhurong has joined #openstack-kolla02:32
*** v1k0d3n has joined #openstack-kolla02:39
*** zhurong has quit IRC02:46
openstackgerritJeffrey Zhang proposed openstack/kolla: Create the _member_ role in the horizon role  https://review.openstack.org/35829802:46
*** rkrum has joined #openstack-kolla02:53
*** Jeffrey4l_ has quit IRC02:54
*** HyperJohnGraham has joined #openstack-kolla02:57
*** dave-mccowan has quit IRC03:02
*** rkrum has quit IRC03:04
*** daneyon has joined #openstack-kolla03:17
*** v1k0d3n has quit IRC03:19
*** rkrum has joined #openstack-kolla03:20
*** duonghq has joined #openstack-kolla03:21
duonghqhappy weekend everybody03:21
*** daneyon has quit IRC03:22
*** v1k0d3n has joined #openstack-kolla03:23
*** rkrum has quit IRC03:40
*** kbaegis has quit IRC03:49
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838803:58
*** kbaegis has joined #openstack-kolla04:00
openstackgerritzhubingbing proposed openstack/kolla: repair aodh image dockerfile  https://review.openstack.org/35071504:07
*** v1k0d3n has quit IRC04:09
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838804:11
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838804:12
kbaegisduonghq: Happy weekend :)04:14
openstackgerritzhubingbing proposed openstack/kolla: Add gnocchi ansible role  https://review.openstack.org/34935104:22
openstackgerritzhubingbing proposed openstack/kolla: Add aodh role  https://review.openstack.org/35102704:26
*** v1k0d3n has joined #openstack-kolla04:27
*** v1k0d3n has quit IRC04:32
*** sdake has joined #openstack-kolla04:46
*** sdake_ has joined #openstack-kolla04:50
sdake_wznoinsk still around?04:53
*** sdake has quit IRC04:53
sdake_wznoinsk if you read  this later - its more then just compute that needs special  attention with ironic, also nova-conductor and the entire interface into how nova operates04:55
sdake_wznoinsk i think also neutron is affected04:55
*** sdake_ has quit IRC05:15
*** unicell has joined #openstack-kolla05:42
openstackgerritTin Lam proposed openstack/kolla: Add ansible role for vmtp container  https://review.openstack.org/35830506:20
openstackgerritShaun Smekel proposed openstack/kolla-kubernetes: Updated Pods and RCs to Deployments  https://review.openstack.org/35830606:26
openstackgerritShaun Smekel proposed openstack/kolla-kubernetes: [WIP] Updated Pods and RCs to Deployments  https://review.openstack.org/35830606:27
*** duonghq has quit IRC06:57
openstackgerritShaun Smekel proposed openstack/kolla-kubernetes: [WIP] Updated Pods and RCs to Deployments  https://review.openstack.org/35830607:00
*** bootsha has joined #openstack-kolla07:00
*** hieulq_ has joined #openstack-kolla07:06
*** matrohon has joined #openstack-kolla07:10
*** salv-orl_ has joined #openstack-kolla07:16
*** salv-orlando has quit IRC07:18
*** matrohon has quit IRC07:59
*** bootsha has quit IRC08:06
*** bootsha has joined #openstack-kolla08:11
*** bootsha has quit IRC08:26
*** v1k0d3n has joined #openstack-kolla08:29
*** bootsha has joined #openstack-kolla08:30
*** hieulq_ has quit IRC08:33
*** v1k0d3n has quit IRC08:33
*** mark-casey has quit IRC08:37
*** sdake has joined #openstack-kolla08:38
*** sdake has quit IRC08:43
*** daneyon has joined #openstack-kolla08:43
*** hieulq_ has joined #openstack-kolla08:46
*** daneyon has quit IRC08:47
*** bootsha has quit IRC08:48
openstackgerritJeffrey Zhang proposed openstack/kolla: Pin Ansible version to 2.1.1.0 in kolla-toolbox  https://review.openstack.org/35832008:56
*** bootsha has joined #openstack-kolla09:36
*** dwalsh has joined #openstack-kolla09:49
*** hieulq_ has quit IRC09:55
*** hieulq_ has joined #openstack-kolla10:20
*** daneyon has joined #openstack-kolla10:31
*** daneyon has quit IRC10:35
*** bootsha has quit IRC10:52
*** bootsha has joined #openstack-kolla10:54
*** hieulq_ has quit IRC11:01
*** dmueller-evoila has joined #openstack-kolla11:04
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838811:14
*** dwalsh has quit IRC11:17
openstackgerritzhubingbing proposed openstack/kolla: repair aodh image dockerfile  https://review.openstack.org/35071511:19
*** sdake has joined #openstack-kolla11:46
*** sdake has quit IRC11:50
*** sdake has joined #openstack-kolla11:51
sdakewznoinsk around?12:00
sdakemorning folks12:01
sdakesay I'll be in and out the next 2-3 days12:01
sdakemoslty out12:01
*** dave-mccowan has joined #openstack-kolla12:09
openstackgerritShaun Smekel proposed openstack/kolla-kubernetes: [WIP] Updated Pods and RCs to Deployments  https://review.openstack.org/35830612:10
*** bootsha has quit IRC12:12
*** bootsha has joined #openstack-kolla12:17
*** zhubingbing has joined #openstack-kolla12:20
kbaegisMorning all12:26
kbaegissdake: Good morning.  Fix your laptop?12:26
sdakekbaegis ya - bad power supply12:26
sdakescabbed my wifes12:26
sdakeabout the e8th one i've been thorugh on that mac12:27
sdake80 bucks a crack12:27
kbaegisNice.  I might be doing that soon.12:27
sdaketerribly made12:27
kbaegisYeah, Apple has crazy margins12:27
sdakeit would beo k if it were 150 if it were made properly12:27
sdakebut seriously their power blocks are junk12:28
kbaegisThe older gen?12:28
sdake85 watt12:28
kbaegisI've never had problems with magsafe212:28
sdakemine break all the time12:28
sdakecable breaks12:28
kbaegisNow they're all apparently usb12:28
kbaegisOh, yeah12:28
sdakeya usbc - can't wait ;)12:28
sdakemagsafe comes unplugged all the time on accident12:28
kbaegisI can.  The port is tiny, and it comes unplugged as well12:29
sdakethat is actually how i broke my screen12:29
kbaegisReally?  Whipped it into the screen or something?12:29
sdakemagsafe popped off, and it came unplugged whlie i was closing my laptop12:29
zhubingbinghello12:29
kbaegisOh, dang12:29
kbaegishello12:29
sdakethis blew up the left corner of the display12:29
sdakebut it is still usable12:29
sdaketrying to find time ot get it repaired12:29
kbaegisWell I'm going to lose my job in two weeks, and I will lose my macbook then :)12:29
sdakei've read its 400-800 at apple store12:29
sdakekbaegis sorry to hear that12:30
kbaegisYeah, crazy margins12:30
sdakekbaegis where do you work?12:30
kbaegisI'm @ Mirantis12:30
zhubingbingMirantis?12:30
sdakei see12:30
sdakewhat happens in 2 weeks?12:30
sdakejust general layoff?12:30
kbaegisAsked to change departments, backfilled, and then my new job disappeared12:30
kbaegisHiring freeze12:30
*** v1k0d3n has joined #openstack-kolla12:30
kbaegisEveryone's real sorry about it and all12:31
sdakei'm sure12:31
kbaegisI walk away w/ good references at least :)12:31
zhubingbingI'm sorry to hear that. have you found your new job?12:31
sdakemost of indsutry is in iring freeze atm12:31
kbaegisThey're anticipating a recession.  Which is smart12:32
sdakerecesion doesn't have much ipact on tech spend12:32
kbaegisWhy the freeze then?12:32
sdakeworld is very unstable atm12:33
sdakethat happens in election years12:33
sdakeonce a new  order happens, things should relax12:33
sdakebrexit was sort of a noop in the us thus far12:33
sdakeeveryone was betting tht wouldnt happen12:34
kbaegisYeah, big in Europe though12:34
sdakeaffects the us12:34
sdakemoves around banking12:34
sdakebrussels, ireland12:34
kbaegisWell, I'm expecting a recession. Student-debt, housing, etc12:34
sdakeeurope has negative interest rates12:34
kbaegisReally?12:34
sdakeya you pay the bank to safeguard your money...12:35
*** v1k0d3n has quit IRC12:35
sdakefull fiath and credit fwiw :)12:35
kbaegisOpen up a savings account with your mattress12:35
sdakei doubled down on my international portfolio12:35
sdakekbaegis the paper money could be no good12:36
sdakebut the bank electronic reference is good protected by the faith and credit12:36
sdakethis is the problem with paper money12:36
*** zhurong has joined #openstack-kolla12:36
kbaegissdake You know what's awesome in a full currency collapse?12:36
kbaegisCheap gold12:36
kbaegis12k12:36
sdakea full currency collapse would cause gold to be worth 4-5k an ounce12:36
sdakei'm a supporter of audit the fed12:37
kbaegisexactly.  But the secret is- and USSR was a case study here- there's a gap before people figure out how to test gold12:37
sdakebut i'm afraid the country wont like the answers.12:37
kbaegisWell we used to have world wars over debt12:37
kbaegisNow we've got economics, ww 2.012:37
openstackgerritzhubingbing proposed openstack/kolla: Add Barbican ansible role  https://review.openstack.org/35251512:38
kbaegisThe fed is simply an instrument of US imperialism.12:38
sdakethe wars wren't over debt, they were for small iconsequential reasons which coudl have been resolved early on which escalated and escalated12:38
sdakein a convential war the us always wins12:38
kbaegisWell, there's a branch of scholarly historians who advocate that every war is about money and property12:39
sdakeif war canbe won12:39
sdakethe old wars prior to ww1 and 2 i agree completely12:39
kbaegisWar is simply about subjugation.  "A government is a group of people, most notably ungoverned"12:39
kbaegisWe have the most favorable rules because we have the biggest guns12:40
kbaegisWhy the dollar is still the reserve currency12:40
sdakeyup if dollar drops off as world reserve currency12:40
sdakeus in for a steep delcine12:40
sdakethat is years out12:40
kbaegisIt should've happened in '0812:41
sdakesurprised it didn't12:41
sdakebut the us printed some more zeros12:41
sdakesurprised quantative easing worked12:41
sdakewas expecting a differenet outcome12:41
sdakethat whole system was riggeed in favor of wallstreet - which is one of hte reasons it worked12:42
kbaegisWell when the fed finally breaks, it will be the end of our indirect empire. We'll have to a) go back to direct warfare, or b) end our empire12:42
kbaegisYeah, wealth concentration is a huge issue. Our empire is going to eat itself12:42
sdakei need to concreate some welth :)12:42
kbaegisYeah, but we aren't playing by the same rules.12:43
openstackgerritzhubingbing proposed openstack/kolla: Add sahara ansible role  https://review.openstack.org/35129412:43
sdakemy uncle and cousin both self made 20millionaires12:43
kbaegisMiddle class is gone mostly because of the housing fraud. How much you wanna bet that your job will get lost during a 30 year fixed?12:43
sdakefather self-made 12 mil12:43
kbaegisNice12:43
kbaegisHow?12:43
sdakemy grandgather moved to arizona with 10 cents in his pocket12:44
sdakeliterally 10 cents12:44
sdakehe used it to get a job12:44
sdakehe started a motorshop later - 5-10 years later12:44
sdakeuncle and cousin grew it into quite an empire12:44
sdakeall southwest motors were sold through their shop12:44
sdakemy father went into law12:44
sdakeand he saves far more then he made during his career12:45
kbaegisWill you buy me some equipment sdake?  :)12:45
sdakehe had 100k usd saved by 2512:45
sdakethey sold hte business12:45
kbaegisThat's cool12:45
sdaketo your question about job over 30 year period12:46
sdakethat is highly unlikely to survive ffor 30  years in one company12:46
*** v1k0d3n has joined #openstack-kolla12:46
sdakei'm on my fourth stint12:47
kbaegisYup.  According to most mortgages, you have 90 days to find a new job.  Add in recessions, and mortgages become an upward money engine (pumping it to the wealthy)12:47
sdakei have a family loan12:47
sdakeand 120k emergency fund (1 year of expenses)12:48
kbaegisAmortization and defaults are the banks way of implementing the "house odds"12:48
kbaegisHuh, just realized that's a bad pun :)12:48
sdakebanks would rather hvae your money then a default - trust me12:48
sdakeyou didn't borrow the house, you borrowed the money12:48
sdakethats what they want back12:49
sdakepeople use their houes at atm machines12:49
sdakebad bad move12:49
sdakeat/as12:49
kbaegisI don't know if that's true. I think it's pretty effectively rigged12:49
kbaegisYou can't blame homeowners12:49
*** zhurong has quit IRC12:49
sdakefor using their house as an atm machine?12:50
sdakethe fact that lenders let em do it - thats the problem12:50
sdakethat is what 2008 was all about12:50
sdakethen the great short12:50
sdakewallstreet profited heavily from the 2008 crash12:50
*** zhurong has joined #openstack-kolla12:50
kbaegisI thought '08 was about ninja loans and rating agency collusion12:50
kbaegisNot refinancing12:51
sdakeall contributing factors12:51
sdakebrb12:51
kbaegisAlso, it's *automatic atm machine. ;)12:53
*** v1k0d3n has quit IRC12:53
sdakethe lack of income verification - banks should have known better12:53
sdakeagency collusion - they knew the debt was no good12:54
sdakehomeowners DIDN"T know their risk was spread across the entire system12:54
sdakeso they spent more then they had and refianced12:55
sdaketo fix their finances12:55
sdakewhen the answer is consume less12:55
sdakei save 50% of my cross12:55
sdakegross12:55
sdakeits painful12:55
sdakelive paycheck to paycheck as a result12:55
kbaegisYeah.  I've been saving 80% for a downpayment.  Going to be helpful since I'm now looking :)12:56
sdakei've only got 140k left on my mortgage12:57
sdakei should probablly just pay it off, but at3% apr12:57
sdakestarted at 240ish around 5 years ago12:57
sdakei just refinanced my car at 2.74% apr too12:58
sdakeyay ;)12:58
sdakebesides those hard assets, debt free and nearing 1mil in investments12:58
kbaegisSeriously?  Nice12:59
kbaegisYou're in the top 1% for assets for sure12:59
sdakethats in market, have about 150 oz of gold as well :)12:59
*** v1k0d3n has joined #openstack-kolla13:00
sdakeby 2020 shoudl have about 2-3 mil13:01
sdakeassuming i can stay employed13:01
kbaegisNice13:01
sdakethe key is starting early13:01
sdake17k/yr at 20 for 10 years is enogh for retirement13:02
kbaegisWell, you're well positioned with openstack13:02
sdakecompounding is a powerful natural force13:02
sdakei dont know about well positioned13:03
sdakei'm a contirbutor like everyone else13:03
kbaegisYeah, but openstack is huge right now13:03
sdakekeys words being right now13:05
sdakeback on the 30 year jobs things13:05
sdakemy strategy for that is to be a tip of the spear engineer13:05
sdakebusinesses rarely cut off the tip of the spear13:06
sdakeand if they do, other businesses want it13:06
sdakehence job security through relevant skillset13:06
sdakei'm a jack of all trades _master_ of many13:06
sdakei used to subscribe to the philsophy do one thing do it well13:06
sdakebut i've learned hybrid engineers are much more effective and various managers recognize it and WANT hyrids13:07
sdakesincethey are not all that common13:07
kbaegisSo it's looking like my kolla-build has hung13:07
sdaketo become a hybrid takes alot of OTJ training13:07
sdakekbaegis - centos?13:07
sdakeit will time out eventually and try another mirror13:08
sdakewe retry each build 3 times13:08
sdake(ocnfigurable)13:08
kbaegislast message is "INFO:kolla.image.build.nova-libvirt:Cleaning up list of fastest mirrors" and has been for ~10 minutes13:08
sdakeyup that happens sometimes13:09
sdakewhich part of the world are ou in13:09
sdakenon-responsive mirror lags up the build13:09
sdakeanothe option is ou are out of disk space13:10
kbaegisI'm in the US13:10
kbaegisDefinitely not a space issue13:10
kbaegisMaybe I should drop my threads back from 32 :)13:11
kbaegisHad some push timeouts13:11
sdakeoh - use threads=813:11
sdakedefaults should be solid on threads13:11
*** dwalsh has joined #openstack-kolla13:12
sdakewe have had reports of build locksup on threads > 813:12
sdakeprobably an option we should deprecate13:12
*** daneyon has joined #openstack-kolla13:13
sdakethrads = 32 uses alot of ram13:14
sdakedocker is limited to consuming 1gig iirc on most platforms13:14
sdakethis is not enogh for that many thrasd13:14
*** salv-orlando has joined #openstack-kolla13:15
sdakedocker ooms - bad things happen13:15
*** v1k0d3n has quit IRC13:18
*** daneyon has quit IRC13:18
*** salv-orl_ has quit IRC13:18
kbaegisReally?13:19
kbaegisSoo13:19
kbaegisIf I have 128G, how do I expand dockers limit?13:19
*** bootsha has quit IRC13:20
kbaegisI really wish I weren't stuck with centos.  Linux 3.x doesn't have proper cgroup isolation13:20
kbaegisI think they fixed that in 4.6.x, so I don't think Xenial has it either13:21
*** dwalsh has quit IRC13:21
*** dwalsh has joined #openstack-kolla13:22
*** v1k0d3n has joined #openstack-kolla13:23
openstackgerritTin Lam proposed openstack/kolla: Add ansible role for vmtp container  https://review.openstack.org/35830513:25
*** bootsha has joined #openstack-kolla13:26
*** bootsha has quit IRC13:31
sbezverk_sdake: ping13:40
*** v1k0d3n has quit IRC13:43
sdakesup sbezverk_13:48
*** dave-mccowan has quit IRC13:49
*** v1k0d3n has joined #openstack-kolla13:51
sbezverk_sdake: can you check this and express your opinion on this approach: http://paste.openstack.org/show/561784/13:51
sdakesbezverk_ that sort of breaks the universal nature of the containers13:53
sdakeunless that shell command comes from json13:54
sdakethen wfm13:54
sdakethe json abi taht is13:54
sbezverk_sdake: unfortunately that is the only way ovs components work with stability13:54
sdakehow does that shell command enter the system?13:55
sdakethe reason we have the json is to add flexibility for others13:55
sbezverk_they are defined in initialization continaer13:55
sbezverk_well it is a very kube specific13:55
sbezverk_abd it does not change kolla image13:56
sdakejson doesn't hve to be standard across system13:56
sdakecould hvae one set of json for k8s one set for ansible13:56
sdakewhat is an init container13:57
sbezverk_sdake: I think you are missing the main point.. all commands which used to be run before starting the main process are removed from the main container13:57
sbezverk_it seems all these activities like copying config files, doing some actions makes kube container less stable13:58
openstackgerritzhubingbing proposed openstack/kolla: Add gnocchi ansible role  https://review.openstack.org/34935113:59
openstackgerritzhubingbing proposed openstack/kolla: Add trove role  https://review.openstack.org/35490113:59
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838813:59
sbezverk_init container is kind of a job which run once before the main container13:59
*** salv-orlando has quit IRC14:01
*** salv-orlando has joined #openstack-kolla14:01
*** dwalsh has quit IRC14:03
*** v1k0d3n has quit IRC14:12
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838814:16
wznoinsksdake: here now14:18
openstackgerritzhubingbing proposed openstack/kolla: repair gnocchi  dockerfile  https://review.openstack.org/34838814:22
*** zhurong has quit IRC14:22
openstackgerritzhubingbing proposed openstack/kolla: Add gnocchi ansible role  https://review.openstack.org/34935114:28
sdakewznoinsk yo14:41
sdakewznoinsk so nova_compute_ironic is only one container14:41
sdakeand your right it would provide correct isolation for us14:42
sdakethe issue is nova_compute_ironic and nova_compute communicate with other parts of the system14:42
sdakeand the otherparts of the system expect one type or the toher14:42
sdakewhen jpeeler worked on it, the other parts of the system were neutron and nova proper14:42
sdakesuch as scheduler and conductor etc14:43
sdakewhat needs to happen is these other parts of the system need tobe made to work with both types of compute managers14:43
*** daneyon has joined #openstack-kolla15:01
*** daneyon has quit IRC15:06
*** vbel has quit IRC15:21
*** vbel has joined #openstack-kolla15:21
*** senk has joined #openstack-kolla15:52
*** ad_rien_ has joined #openstack-kolla16:01
sdakesup vbel16:06
openstackgerritzhubingbing proposed openstack/kolla: fix sahara dockerfile  https://review.openstack.org/35132016:11
openstackgerritzhubingbing proposed openstack/kolla: fix sahara dockerfile  https://review.openstack.org/35132016:16
zhubingbingsdake16:17
zhubingbinghelp review mycode16:17
sdakezhubingbing brain not warmed up enough to review just yet16:25
zhubingbingI'm sorry, I don't know today is Sunday.16:26
zhubingbing- -16:26
sdakenp16:26
sdakewznoinsk ^^16:27
sdakesee timestamp :4216:27
zhubingbing-)16:28
zhubingbingsadake,I saw rally have dockerfile, I intend to integrate the kolla inside the rally. How do you feel?16:29
sdakewfm16:32
zhubingbingsure16:33
sdakealthough i thought rally had to run outside of openstack16:33
sdakenot inside of it16:33
zhubingbingwf16:36
zhubingbingwfm what mean?16:37
*** daneyon has joined #openstack-kolla16:50
*** daneyon has quit IRC16:54
*** brad[] has quit IRC17:11
*** brad[] has joined #openstack-kolla17:13
*** Administrator__ has joined #openstack-kolla17:30
*** zhubingbing has quit IRC17:33
*** zhugaoxiao has quit IRC17:33
*** jrist has quit IRC17:52
sdakewfm = works or me17:59
sdakefor me17:59
*** jrist has joined #openstack-kolla18:07
*** senk has quit IRC18:25
*** unicell1 has joined #openstack-kolla18:39
*** unicell has quit IRC18:39
*** salv-orl_ has joined #openstack-kolla19:16
*** salv-orlando has quit IRC19:19
*** gfhellma has joined #openstack-kolla19:28
*** wirehead_ has quit IRC19:28
*** wirehead_ has joined #openstack-kolla19:30
*** jtriley has joined #openstack-kolla19:42
*** jtriley has quit IRC19:48
*** jtriley has joined #openstack-kolla19:50
*** rhallisey has joined #openstack-kolla20:04
*** jtriley has quit IRC20:07
*** gfhellma has quit IRC20:12
sdakesup wirehead_20:46
sdakesup gang20:46
sbezverk_sdake: feel like checking one strace? I am chasing l3 RTNETLINK issue20:57
sdakesbezverk_ can you give 5-10 mins - am writing an email20:57
sdakesbezverk_ don't want to forgt about it20:57
sbezverk_sdake: absolutamente20:57
openstackgerritShaun Smekel proposed openstack/kolla: Customizations for MariaDB  https://review.openstack.org/35442221:03
sdakesbezverk_ ok21:17
sdakesbezverk_ wound me ;)21:17
sdakewhat is the rtnetlink return code?21:18
sbezverk_invalid argement21:19
sbezverk_oops argument21:19
*** daneyon has joined #openstack-kolla21:20
sdakebetter then econnrefussed :)21:21
sdakesbezverk_ can you paste the backtrace or did you want to use webex21:24
sbezverk_one sec21:25
*** daneyon has quit IRC21:25
*** dmueller-evoila has quit IRC21:26
sbezverk_sdake: interesting here is back trace http://paste.openstack.org/show/561985/21:28
sbezverk_after I updated version of flanneld it looks like it got a bot better.21:29
sdakenot inspring :)21:30
sdakeso not doing an rtnetlink error anymore?21:30
sdakei see it fails to apply iptables rules21:31
sdakebut dont see any rtnetlink problems21:31
sdakeis this with --net=host?21:32
sbezverk_sdake: there is still rtnetlink error21:32
sdakei just grepped that log for RTNETLINK - nothing21:33
sdakegrepped  for invalid argument- nothing21:34
sbezverk_man, so ip netns is working but from within a container21:34
sbezverk_http://paste.openstack.org/show/561987/21:34
sbezverk_what is not working then is sharing of namespaces that is why when I was running the same command from the host it failed21:35
sdakewhat about outside the container21:35
sbezverk_[root@k8s-4 ~]# ip netns exec qrouter-baa3335b-0013-42dd-856a-64a5c2557a01 ip a21:35
sbezverk_RTNETLINK answers: Invalid argument21:35
sbezverk_setting the network namespace "qrouter-baa3335b-0013-42dd-856a-64a5c2557a01" failed: Invalid argument21:35
sbezverk_sorry for pasting it here21:35
sdaketry ip netns list21:36
sdakeor whatever the equivalent ommand is21:36
sbezverk_outside?21:36
sdakeyup21:36
sdakei want tot see if you have any routeers or whatnot21:36
sbezverk_ip netns list21:36
sbezverk_RTNETLINK answers: Invalid argument21:36
sbezverk_RTNETLINK answers: Invalid argument21:36
sbezverk_qrouter-baa3335b-0013-42dd-856a-64a5c2557a0121:36
sbezverk_so outside it sees it but cannot properly access21:37
sbezverk_since it is missing shared flag on bind21:37
sdakeyup that would be my guess as well21:38
sdakethe vms you aer startingdon't have shared speciied in docker21:38
sbezverk_but kube does not support this flag yet21:38
sdakein docker's ystemd21:38
sdakecan you point me at the relevant shared flag we pass in the ansible code?21:38
sbezverk_but it is less of a problem now, as seeing namesapce outside of container is not required21:38
sdakeseeing namespace outside container is helpful - oeprators will want that21:39
sbezverk_the only problem might be if other containers need accessign it like dhcp-agent for example21:39
sdakesbezverk_ i know of only one place shared is specified21:39
sbezverk_to overcome this issue I would need to run l3 and dhcp in the same pod21:39
sdakeand that is in systemd file in the virtual machines where minions are running21:39
wznoinsksdake: hi, a long shot but I'd imagine if nova_compute_ironic would be in a separate UTS namespace (isolate two system identifiers) and attaching to something as virtual as linux bridge/ovs should work but right I did hear it was a problem from ppl on summits, I may have a chance to look into it21:40
sdakewznoinsk that went way over my head ;)21:41
sdakemake it work flowers will fall from the sky :)21:41
wznoinskI hope you hold on to your words ;-)21:42
sdakei could drop them out of a window ;)21:42
*** imcsk8_ has joined #openstack-kolla21:42
sdakesbezverk_ what shared flag are you talking about21:43
sdakeyou mean this: https://github.com/openstack/kolla/blob/master/ansible/roles/neutron/tasks/start.yml#L16721:45
wznoinsksbezverk_: is there anyway of enforcing this mount to be always shared via systemd for example?21:46
*** imcsk8 has quit IRC21:46
wznoinskAFAIR it was to be shared on the host (?)21:46
sdakewznoinsk docker is the one that shares it21:46
sdakebut wonder if its possible to hardcode shares as wznoinsk identified21:47
sbezverk_sdake wznoinsk docker shares it when it is told to do so, the problem here is kube does not tell it to docker21:47
sdakesbezverk_ does that :shared flag go into a mount operation in some way?21:48
sbezverk_sdake: doubt kube builds docker file on the fly21:48
sdakesbezverk_ - couple options to see if your theory is correct21:48
sdakeif docker popens to the mount commnd21:49
sdakeit would be possible to hack mount to always share21:49
sdakeif docker accesses the mount systemcall directly, could hack docker to do the same thing21:49
sbezverk_sdake: that is not the big issue as long as we run dhcp agent in the same pod as l321:49
sdakeas in not sharing with the host the netns moutnpoints?21:50
sbezverk_I will add dhcp to my version of l3 agent container and test21:50
sbezverk_right21:50
sdakethis is not optimal21:50
sbezverk_I mean it is just inconvenient21:50
sbezverk_but it will be fixed eventually21:50
sbezverk_anyhow I this colocating l3 and dhcp is less intrisuive than hacking docker ;-)21:51
sbezverk_let me test it and I will let you know21:51
sbezverk_sdake: http://paste.openstack.org/show/561988/21:52
sdakeso seems to work?21:53
sdakeno backtraces?21:53
sbezverk_there is one more backtrace but now it is not fatal21:53
sbezverk_something to do with iptables for ipv621:54
sdakeare you sure its only ipv6?21:54
sbezverk_sdake: I think so but please double check: http://paste.openstack.org/show/561989/21:54
sdakesee if you can run ip6tables-restore in the container as root22:06
sdakewithout all the ip netns exec22:07
sbezverk_sorry I killed already pod22:08
sbezverk_I am adding dhcp, shoudl be done soon22:08
sdakeso you want a fat container for this?22:08
sbezverk_no, not fat container22:11
sbezverk_1 process per container but in the pod we can have mul;tiple containers22:12
sbezverk_we already use this approach22:12
sdakehow will they share the namespace?22:12
sbezverk_because within pod22:12
rhalliseypods share namespaces22:12
sbezverk_containers share22:13
sbezverk_rhallisey hey man22:13
rhalliseyhey22:13
sdakeall namespaces?22:13
sbezverk_sdake yep22:13
sbezverk_well, in theory22:14
sdakewonder how they get docker to do thta22:14
rhalliseyya22:14
sbezverk_I am about to test it22:14
sdakei find it super hard to believe that a pod can share the mount namesapce22:18
sdakewhich is where the files re that access the kernel22:19
sdakeApplications within a pod also have access to shared volumes, which are defined as part of a pod and are made available to be mounted into each application’s filesystem.22:26
sdakefrom http://kubernetes.io/docs/user-guide/pods/22:26
sbezverk_sdake: DAMN :-(22:26
sbezverk_it sees it but cannot access the same way as from the host22:26
sdakeyup - easy solution - use a named volume22:27
sdakeoh you said the files can be seen22:27
sdakeso the way this works sbezverk_22:27
sdakeyou are taking the namesapce tuff out of the host entirely22:28
sdakeand putting  it into he container namespace22:28
sbezverk_sdake: we already have named volume mapped to host /run/netsh22:28
sdakethe reason we have it on the host is for tools like tcpdump and ip to work properly22:28
sdakeif you have named volulme mapped to /run/netns how did you expect the host binddmounts to work?22:29
sbezverk_sdake: my mistake we have bind mount22:30
sdakewhere is your bindd mount to?22:30
sdakethe host?22:30
sbezverk_yes22:31
sdakewhat is a "shared volume"22:31
sbezverk_if I do ls /run/netns on the host and on both containers I see the same info22:31
sdakeuse this:22:32
sdakehttp://kubernetes.io/docs/user-guide/volumes/22:32
sdakeinstead of hte bindmounts for /run/netns22:32
sdakewow kubernetes has come a long way22:35
sdakeso sbezverk_ use emptyDir volume type or /run/netns22:35
sbezverk_sdake: I do use volume in pod definition22:35
sdakei dont know the syntax of the volume type22:36
sbezverk_which is mapped to host's directory22:36
sbezverk_I cannot use emptydir22:36
sdakewhy not?22:36
sbezverk_as then host will not see it22:36
sdakeone step at a time22:36
sdakegoal is to get something working22:37
sdakenot have it perfect22:37
sdakeif k8s has gaps, we can ge thtose fixed down the road22:37
sdakei tink just 4 things need access to this emptydir22:38
sdakethe neutron agents specifically22:38
sdakeand ovs iirc22:38
sdakewhatever the 4 things are related to networking :)22:38
sdakethe pod needs to include these for networking things22:39
sdakewish i remembered what they were22:39
sdakefour22:39
sdakehow /query rhallisey22:39
sdakequery rhallisey22:39
sdakegrn22:39
*** imcsk8_ is now known as imcsk822:40
*** salv-orl_ has quit IRC23:02
*** daneyon has joined #openstack-kolla23:09
*** daneyon has quit IRC23:13
*** rhallisey has quit IRC23:30
*** sdake has quit IRC23:34
*** bmace has quit IRC23:49
*** bmace has joined #openstack-kolla23:49
*** zhurong has joined #openstack-kolla23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!