Friday, 2024-04-05

opendevreviewAdam McArthur proposed openstack/oslo.service master: Removing oslo_wsgi eventlet dependency  https://review.opendev.org/c/openstack/oslo.service/+/91492700:00
opendevreviewAdam McArthur proposed openstack/oslo.service master: Removing oslo_wsgi eventlet dependency  https://review.opendev.org/c/openstack/oslo.service/+/91492701:13
opendevreviewAdam McArthur proposed openstack/oslo.service master: Removing oslo_wsgi eventlet dependency  https://review.opendev.org/c/openstack/oslo.service/+/91492701:36
tkajinamhberaud, o/ I found that rdo still ships eventlet 0.33.3 which contains a few bugs recently fixed. I think we have to propose bumping the version in fedora but do you have any recommendation about the version used there ?07:39
tkajinamhberaud, ideally we can use 0.35.1, which is currently in u-c but we suspect fedora may prefer having the latest version which is 0.36.107:40
fricklertkajinam: thanks for the indirect reminder, we'll have 0.36.1 in u-c in about 2h, see https://review.opendev.org/c/openstack/requirements/+/91425607:47
tkajinamfrickler, nice :-)07:48
tkajinamafter discussion in #rdo we propose 0.35.1 initially but if that bumps goes smooth then 0.36.1 may be still a good option07:48
hberaudtkajinam: I recently released eventlet 0.36.1, if possible I'd suggest using this one08:21
tkajinamok08:21
tkajinamwe'll see if we can use the version in u-c first and them may later attempt further bump.08:22
hberaud0.35.1 is a good version, 0.36.0 is a buggy version, 0.36.1 fix a bug introduced by 0.3608:22
tkajinamyeah08:23
hberaudthough 0.36 fix an important bug in the new asyncio hub08:24
tkajinamis that one of the prep works to introduce asyncio, right ?08:24
hberaudso yeah 0.36.1 is a must have08:24
hberaudnope08:24
hberaudAsyncio has been introduced around 0.34 IIRC08:25
tkajinamok08:25
hberaudwe made more than 15 releases in the last 3 months08:25
tkajinamwe may eventually replace it at some point but getting it back on healthy maintenance track is nice. good work done by you and a few other folks like Sean08:27
hberaudif you want details about all the releases (since they gave us the writing rights) you can use this label https://github.com/eventlet/eventlet/issues?q=is%3Aissue+is%3Aclosed+label%3Arelease08:27
hberaudthanks08:28
hberaudin all the case we can't replace eventlet without first get it back on an healthy maintenance track08:29
hberaudthat wouldn't be possible08:29
tkajinamah, thanks for the query. just book-marked it08:29
tkajinamyeah. otherwise we may need a folk which causes another mess08:30
hberaudI don't know if you use RSS feeds but you can subscribe to git tags and releases08:30
hberaud(from github)08:31
hberaudI use this github feature to track the updates of the libs that we use 08:31
hberaudI use freshrss08:31
tkajinamoh that sounds nice08:32
hberaudhttps://www.freshrss.org/08:32
tkajinamwhile we may catch upcoming incompatibility with it, another challenge is that we often see problems caused by "inactive" project and finding such projects by rss feed is a bit tricky08:32
tkajinambecause you don't receive any update about these repos but these become silently broken/dead/etc ... X-(08:33
hberaudhence you are automatically informed of the latest changes for the libs where you have personal interests08:33
hberaudindeed08:33
tkajinamyeah. it'd be useful for some core libs with active update08:33
tkajinamand then we may check git blame of u-c file to find out inactive repos08:33
hberaudsome of my tracking are pymemcache, dogpile, pyamqp08:34
hberaudyour git blame idea is a good idea08:35
hberaudthat would be nice to have a dashboard where you sync your reqs and where updates are listed and where inactive libs are highligthed 08:36
hberaudthat won't be too difficult to create a kind of tool at the web app format08:37
tkajinamyeah08:37
hberaudeven, maybe, it already exists a similar tool08:37
tkajinamthough being a 'CLI' person I may probably start with grep like; https://paste.opendev.org/show/bNpOdZkui90O1LbriZo9/08:38
hberaudyeah in an openstack your tricks do the job08:38
hberaud*context08:38
hberaudadded your command to my bookmarks :)08:39
hberaudyou can even propose a related tool embdded in openstack/requirements08:40
tkajinamyeah08:40
hberaudI don't think we are the only ones to search for such kind of tool08:41
hberaudopenstack/requirements already contains a tools directory with some tooling08:42
hberaudgithub seems really flaky today08:46
hberauderror 500 since a couple of minutes08:47
tkajinamyeah08:48
tkajinammaybe they are applying their AI to find out another xz attack ? :-P08:48
hberaudlol08:48
hberaudthe vlc PTL explained in a youtube video that, one day, someone tried to stole him a physical access on his laptop during a presentation he made at a conf08:52
tkajinamthat reminds me of how encrypting disk data is important08:54
hberaudfortunately for him, he seen the thief and his pgp keys were protected by password etc... If I correctly understood his session remained opened without him in front of his laptop08:54
hberaudtotally and signing too08:54
hberaudespecially when you work on important OS project 08:55
hberaudhe also explained that he often received weird patches. He often have security suspission 08:56
hberaudanyway we live in a cruel world :)08:57
tkajinamcrazy08:59
tkajinamwe''ll see how everything goes, but it's clearly showing that we are at another turning point08:59
hberaudEntropy of systems increase with time. This rule applies to codes and projects. The more the entropy the less the security.09:03
tkajinamyeah. totally makes sense09:04
hberaudThe strength of a chain is equal to that of its least strong link. The slightest application is made of several layers. Each layer is a link in that chain. Some of them are possibly weaks links. Some people are earn money at finding those links.09:10
hberaudQ.E.D09:11
tkajinam+109:17
fricklerhttps://www.githubstatus.com/ they are working on it it seems. typical friday stuff ;)09:17
tkajinamQuick fix to make people work on Friday ? I like quick fix in general but this might be an exceptional case09:19
opendevreviewDr. Jens Harbott proposed openstack/openstackdocstheme master: Fix series selection and sorting  https://review.opendev.org/c/openstack/openstackdocstheme/+/91512812:41
opendevreviewDr. Jens Harbott proposed openstack/openstackdocstheme master: Don't offer to show unmaintained versions  https://review.opendev.org/c/openstack/openstackdocstheme/+/91512912:41
opendevreviewTakashi Kajinami proposed openstack/oslo.log master: Disable implementation for watch_log_file  https://review.opendev.org/c/openstack/oslo.log/+/91506813:53
hberaudFYI, I'll absent during the next 2 weeks (PTO), I'll be back on Apr 22. See you soon.14:58
*** hberaud is now known as hberaud_PTO15:00
opendevreviewTakashi Kajinami proposed openstack/oslo.log master: Disable implementation for watch_log_file  https://review.opendev.org/c/openstack/oslo.log/+/91506822:19

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!