Thursday, 2014-03-13

*** Midnightmyth has quit IRC00:01
*** jasondotstar has joined #openstack-swift00:22
*** miurahr has joined #openstack-swift00:26
*** matsuhashi has joined #openstack-swift00:27
*** miurahr has left #openstack-swift00:27
*** ben_roeder1 has joined #openstack-swift00:29
*** csd has joined #openstack-swift00:29
*** EmilienM has quit IRC00:30
*** omame has quit IRC00:30
*** omame has joined #openstack-swift00:30
*** ondergetekende has quit IRC00:30
*** ondergetekende has joined #openstack-swift00:31
*** CrackerJackMack has quit IRC00:31
*** CrackerJackMack has joined #openstack-swift00:32
*** ben_roeder has quit IRC00:33
*** EmilienM has joined #openstack-swift00:35
*** jasondotstar has quit IRC00:36
*** csd has quit IRC00:37
*** shri has quit IRC00:40
*** jasondotstar has joined #openstack-swift00:45
*** Alex_Gaynor has quit IRC00:48
*** briancline has quit IRC00:52
*** sungju_ has quit IRC00:52
*** sungju has joined #openstack-swift00:52
*** briancline has joined #openstack-swift00:53
*** sudorandom has quit IRC00:53
*** wkelly has quit IRC00:53
*** Alex_Gaynor has joined #openstack-swift00:54
*** sudorandom has joined #openstack-swift00:54
*** wkelly has joined #openstack-swift00:55
*** miurahr has joined #openstack-swift00:59
*** miurahr has quit IRC01:00
creihtbv/win 2001:00
creihtheh01:00
*** Dharmit has joined #openstack-swift01:02
*** byeager has joined #openstack-swift01:07
*** matsuhashi has quit IRC01:11
*** matsuhashi has joined #openstack-swift01:14
*** Edward-Zhang has joined #openstack-swift01:15
*** byeager has quit IRC01:19
claygcreiht: hey!  is/was dfg in today?01:21
*** Edward-Zhang has quit IRC01:21
creihtclayg: nope01:21
claygnp, i figured - can you say when he'll be back on - I really want to touch base with him on "Make cores work better" - so I just need to know when I should setup a reminder to ping him01:22
*** Edward-Zhang has joined #openstack-swift01:22
creihtyeah not sure sorry01:23
claygcoo01:23
*** mkollaro has quit IRC01:27
*** matsuhashi has quit IRC01:31
*** matsuhashi has joined #openstack-swift01:31
*** matsuhashi has quit IRC01:32
*** matsuhashi has joined #openstack-swift01:35
*** Edward-Zhang has quit IRC01:36
openstackgerritClay Gerrard proposed a change to openstack/swift: Clean up Account ACL sysmeta in AccountController  https://review.openstack.org/8014001:46
*** nosnos has joined #openstack-swift01:46
*** seandrummond has joined #openstack-swift01:58
*** seandrummond has quit IRC01:58
*** seandrummond has joined #openstack-swift01:59
*** h6w has joined #openstack-swift02:08
h6wHi.  I'm trying to use cloudfuse to mount a swift store.  swift stat,list, etc. all work fine, but cloudfuse says that there's an SSL certificate problem.02:09
h6wMy swift proxy certificate is self-signed.02:09
h6wI tried copying it across and into the /etc/ssl/certs dir but it seems to ignore it.02:10
claygmaybe stick it in like this -> http://stackoverflow.com/questions/8876944/adding-self-signed-ssl-certificate-for-libcurl - somewhere in here -> https://github.com/redbo/cloudfuse/blob/master/cloudfsapi.c#L13202:13
clayg^ redbo02:13
*** keving2 has quit IRC02:16
*** wer has quit IRC02:16
redboYou can do that, or just set CURLOPT_SSL_VERIFYPEER to 0 and *probably* nobody will MITM attack you :)02:17
h6wredbo: Oh, hey!  I sent you an email today.  Didn't realise you were in my timezone. :-)02:19
claygreally you are in redbo's timezone...02:19
redboI'm not sure what timezone I'm living in02:19
claygredbo is in his *own* timezone02:19
h6wlol.  agreed.02:19
h6w...and it goes just that little bit faster than the earths rotation. :-p02:20
redboactually, I think I'm on a 26 hour day02:21
redbolike people on a submarine.  that's a thing, right?02:25
redbooh, looks like days on a submarine are 18 hours02:25
h6wHow does that work?  Suddenly we can travel faster through water than air??02:30
h6wok.  Still no workee. :-(02:31
h6wsudo CURLOPT_URL=https://192.168.0.2:8080 CURLOPT_CAINFO=/etc/ssl/certs/swift-proxy.crt CURLOPT_SSL_VERIFYPEER=1 cloudfuse -d -o username=system:root,password=testpass,authurl=https://192.168.0.2:8080/auth/v1.0 /media/cloud/02:32
h6w"SSL certificate problem, verify that the CA cert is OK."02:33
h6wI don't think it's a curlopt problem.  If I do CURLOPT_SSL_VERIFYPEER=0 I still get the same error.02:34
*** seandrummond has quit IRC02:40
*** matsuhashi has quit IRC02:45
*** matsuhashi has joined #openstack-swift02:45
*** Edward-Zhang has joined #openstack-swift02:45
*** matsuhashi has quit IRC02:46
*** matsuhashi has joined #openstack-swift02:46
*** keving1 has joined #openstack-swift02:46
*** matsuhashi has quit IRC02:47
*** matsuhashi has joined #openstack-swift02:47
*** matsuhashi has quit IRC02:48
*** matsuhashi has joined #openstack-swift02:49
*** matsuhashi has quit IRC02:49
*** matsuhashi has joined #openstack-swift02:50
*** keving1 has quit IRC02:55
*** changbl has quit IRC03:33
*** Edward-Zhang has quit IRC03:37
*** nshaikh has joined #openstack-swift03:42
*** matsuhashi has quit IRC03:49
*** kun_huang has joined #openstack-swift03:49
*** keving1 has joined #openstack-swift03:51
h6wAny thoughts about this, anyone?03:59
*** keving1 has quit IRC04:00
madhurianyone around?04:02
h6wYes, a couple.04:03
*** h6w has quit IRC04:10
*** nshaikh has quit IRC04:13
*** h6w has joined #openstack-swift04:16
hugokuoDoes anyone know if racklabs's php-cloudfiles still works with Swift ?04:20
*** saurabh_ has joined #openstack-swift04:20
*** saurabh_ has joined #openstack-swift04:20
*** dmorita has joined #openstack-swift04:21
*** Edward-Zhang has joined #openstack-swift04:23
*** zaitcev has quit IRC04:32
*** matsuhashi has joined #openstack-swift04:47
h6wHmmm.  OK.  If I manually construct the curl queries, they work ok, too.04:52
h6wSo there's something funky in cloudfuse.04:53
*** jasondotstar has quit IRC04:57
*** Diddi has joined #openstack-swift05:02
*** ppai has joined #openstack-swift05:16
*** keving1 has joined #openstack-swift05:26
*** keving1 has quit IRC05:33
*** gyee has quit IRC05:51
h6whttp://pastebin.com/SirDHe3W05:58
*** kun_huang has quit IRC06:06
*** Midnightmyth has joined #openstack-swift06:19
*** miurahr has joined #openstack-swift06:29
*** keving1 has joined #openstack-swift06:31
*** psharma has joined #openstack-swift06:33
*** miurahr has quit IRC06:39
*** keving1 has quit IRC06:39
*** miurahr has joined #openstack-swift06:46
openstackgerritClay Gerrard proposed a change to openstack/swift: Harden v2 common.middleware.acl interface  https://review.openstack.org/8018806:46
*** miurahr has quit IRC06:50
*** miurahr has joined #openstack-swift07:00
*** chandan_kumar has joined #openstack-swift07:10
*** Midnightmyth has quit IRC07:13
*** matsuhashi has quit IRC07:32
*** matsuhashi has joined #openstack-swift07:32
*** nosnos has quit IRC07:32
*** nosnos_ has joined #openstack-swift07:32
*** keving1 has joined #openstack-swift07:36
*** foexle has joined #openstack-swift07:38
*** miurahr has quit IRC07:39
*** keving1 has quit IRC07:44
*** madhuri has quit IRC07:47
*** kun_huang has joined #openstack-swift08:03
*** saju_m has joined #openstack-swift08:12
*** miurahr has joined #openstack-swift08:14
*** mmcardle has joined #openstack-swift08:25
*** mmcardle has quit IRC08:25
*** mmcardle has joined #openstack-swift08:25
*** keving1 has joined #openstack-swift08:41
*** nacim has joined #openstack-swift08:44
*** keving1 has quit IRC08:50
*** jasondotstar has joined #openstack-swift09:02
*** matsuhashi has quit IRC09:07
*** nosnos has joined #openstack-swift09:11
*** nosnos_ has quit IRC09:11
*** matsuhashi has joined #openstack-swift09:12
openstackgerritA change was merged to openstack/swift: Fix ring-builder crash  https://review.openstack.org/7971809:15
*** miurahr has quit IRC09:22
*** Dharmit has quit IRC09:29
*** chandan_kumar has quit IRC09:30
*** mlipchuk has joined #openstack-swift09:39
*** miurahr has joined #openstack-swift09:41
*** matsuhashi has quit IRC09:44
*** chandan_kumar has joined #openstack-swift09:46
*** keving1 has joined #openstack-swift09:46
*** matsuhashi has joined #openstack-swift09:47
*** bada has joined #openstack-swift09:53
*** keving1 has quit IRC09:55
*** jasondotstar has quit IRC10:00
*** jamieh has joined #openstack-swift10:01
*** jamieh is now known as Guest6349410:01
*** miurahr has quit IRC10:02
*** Guest63494 has quit IRC10:07
*** jamieh_ has joined #openstack-swift10:07
*** bada_ has joined #openstack-swift10:15
*** peluse has quit IRC10:16
*** bada has quit IRC10:16
*** mkollaro has joined #openstack-swift10:32
*** Edward-Zhang has quit IRC10:33
*** ppai has quit IRC10:36
*** keving1 has joined #openstack-swift10:51
*** ppai has joined #openstack-swift10:53
*** mkollaro has quit IRC10:58
*** keving1 has quit IRC11:00
*** mkollaro has joined #openstack-swift11:09
*** matsuhashi has quit IRC11:11
*** matsuhashi has joined #openstack-swift11:12
*** dmorita has quit IRC11:19
*** Trixboxer has joined #openstack-swift11:21
*** jasondotstar has joined #openstack-swift11:22
*** saurabh_ has quit IRC11:35
*** jamieh_ is now known as jamieh11:37
*** jamieh is now known as Guest6280311:37
*** Guest62803 has quit IRC11:39
*** jamieh_ has joined #openstack-swift11:39
*** jamieh_ is now known as jamie_h11:41
*** dmsimard has joined #openstack-swift11:42
*** ppai has quit IRC11:45
*** pconstantine has joined #openstack-swift11:46
*** keving1 has joined #openstack-swift11:56
*** ppai has joined #openstack-swift11:58
*** keving1 has quit IRC12:04
*** peluse has joined #openstack-swift12:10
*** matsuhashi has quit IRC12:11
*** matsuhashi has joined #openstack-swift12:12
*** nosnos has quit IRC12:15
*** matsuhashi has quit IRC12:16
*** miurahr has joined #openstack-swift12:17
*** matsuhashi has joined #openstack-swift12:26
*** kun_huang has quit IRC12:30
*** fifieldt has quit IRC12:47
*** miurahr has quit IRC12:50
*** seandrummond has joined #openstack-swift12:54
*** keving1 has joined #openstack-swift13:01
*** keving1 has quit IRC13:10
*** mmcardle has quit IRC13:13
*** mlipchuk has quit IRC13:15
*** psharma has quit IRC13:16
*** changbl has joined #openstack-swift13:19
*** lpabon has joined #openstack-swift13:20
*** mmcardle has joined #openstack-swift13:20
*** ppai has quit IRC13:20
*** Edward-Zhang has joined #openstack-swift13:34
*** jasondotstar has quit IRC13:38
*** SkyRocknRoll__ has joined #openstack-swift13:40
*** matsuhashi has quit IRC13:42
*** seandrummond has quit IRC13:44
*** seandrummond has joined #openstack-swift13:44
*** Dharmit has joined #openstack-swift13:45
*** Edward-Zhang has quit IRC14:02
*** keving1 has joined #openstack-swift14:06
*** keving1 has quit IRC14:15
*** seandrummond has quit IRC14:16
*** tdasilva has joined #openstack-swift14:17
*** saju_m has quit IRC14:22
*** jasondotstar has joined #openstack-swift14:25
*** piyush has joined #openstack-swift14:33
*** PradeepChandani has quit IRC14:39
*** miurahr has joined #openstack-swift14:49
*** erlon has joined #openstack-swift14:50
*** rishi__ has joined #openstack-swift14:52
*** Trixboxer has quit IRC14:53
*** kun_huang has joined #openstack-swift14:59
*** lpabon_ has joined #openstack-swift15:00
*** chandan_kumar has quit IRC15:02
*** chandan_kumar has joined #openstack-swift15:02
*** lpabon_ has quit IRC15:04
*** lpabon_ has joined #openstack-swift15:04
*** lpabon_ has quit IRC15:05
*** lpabon has quit IRC15:05
*** mlipchuk has joined #openstack-swift15:06
*** mkerrin has quit IRC15:07
*** seandrummond has joined #openstack-swift15:07
*** keving1 has joined #openstack-swift15:11
*** mlipchuk has quit IRC15:19
*** keving1 has quit IRC15:20
*** jergerber has joined #openstack-swift15:21
*** tristanC has quit IRC15:24
*** tristanC has joined #openstack-swift15:25
*** saurabh_ has joined #openstack-swift15:28
*** mkerrin has joined #openstack-swift15:33
*** odyssey4me has joined #openstack-swift15:34
*** jasondotstar has quit IRC15:38
*** bada_ has quit IRC15:42
*** bada_ has joined #openstack-swift15:42
*** jamie_h has quit IRC15:47
*** SkyRocknRoll__ has quit IRC15:47
*** jamieh has joined #openstack-swift15:50
*** jamieh is now known as Guest8959615:50
*** Guest89596 has quit IRC15:51
*** jamieh_ has joined #openstack-swift15:51
*** odyssey4me has quit IRC16:11
*** keving1 has joined #openstack-swift16:16
*** seandrummond has left #openstack-swift16:21
*** kun_huang has quit IRC16:23
*** keving1 has quit IRC16:25
*** jasondotstar has joined #openstack-swift16:32
*** gyee has joined #openstack-swift16:33
*** changbl has quit IRC16:41
*** dmsimard has quit IRC16:48
*** mlipchuk has joined #openstack-swift16:52
*** jamieh_ has quit IRC17:09
*** shri has joined #openstack-swift17:13
notmynamegood morning everyone17:13
*** nacim has quit IRC17:14
portantegood morning, good afternoon, good evening and good night!17:14
dfgclayg: i'm back. that doc change looks fine. was there anything else you wanted to ask me?17:15
dfgclayg: did you change the commit msg too?17:17
*** keving1 has joined #openstack-swift17:20
*** jamieh has joined #openstack-swift17:21
*** jamieh is now known as Guest6321517:21
*** piyush has quit IRC17:28
*** changbl has joined #openstack-swift17:33
*** lpabon has joined #openstack-swift17:51
*** gyee has quit IRC17:53
*** h6w has quit IRC17:56
*** h6w has joined #openstack-swift17:56
*** changbl has quit IRC17:58
pelusemorning portante18:03
pelusemorning notmyname18:03
portantepeluse: morning18:03
*** zaitcev has joined #openstack-swift18:03
*** ChanServ sets mode: +v zaitcev18:03
pelusenotmyname:  what up with that comment on the tempurl test modification?18:04
notmynamepeluse: just saw it18:07
pelusethe ec merge was bitten by it as well I noticed...18:07
peluseand I think one of torgomatic's recent ones18:08
notmynameand a bunch yesterday...18:09
portantepeluse: do you have a reference?18:09
notmynamehttps://review.openstack.org/#/c/80108/18:11
notmynamegetting a kibana link now18:11
peluseportante:  we're thinking that might fix a failure that keeps harassing patches, seems to be picking on me (or the EC branch) for some reason... or least it feels like it :)18:12
*** Dharmit has quit IRC18:13
*** mmcardle has quit IRC18:17
portantenotmyname, peluse: I think we have to be careful with code that assumes that two consecutive time.time() calls end up with values close to each other.18:17
notmynameya, I think that's the issue with the original test18:18
portanteon the heavily loaded systems, the exipres time can potentially land a value greater than test_timeout, even with the bump to 1018:18
portantei think capturing the time once fixes that18:18
portantethen calculating the two values, expires and test_timeout off of the base time18:19
notmynameugh. not having any luck with logstash18:19
*** Guest63215 has quit IRC18:21
notmynameportante: ya, you're right. new patch set submitted there18:22
pelusenotmyname:  were you going to update the commit message?18:23
peluse(per the other comment)18:23
notmynamepeluse: not yet ;-)18:23
notmynameI don't have any links yet for anything18:24
peluselinks?18:24
notmynamehttp://logs.openstack.org/04/71704/6/check/check-tempest-dsvm-full/d268267/console.html#_2014-03-13_01_02_02_56018:28
*** juravushka has joined #openstack-swift18:29
torgomaticfalsehoods programmers believe about time: http://infiniteundo.com/post/25326999628/falsehoods-programmers-believe-about-time18:31
pelusetemp_url_expires=  139467175618:33
pelusex-timestamp: 1394671755.713418:33
*** juravushka has quit IRC18:34
peluseI don't understand how that could happen (if I'm reading the log correctly) based on even the older code18:36
portantepeluse: reading the log post above by notmyname?18:38
peluseportante:  yes, one that shows the failure18:38
peluseI believe the temp_uril_expires is just what it says it is and the x-timestamp I think is from the subsequent GET request that should have been at least 2 seconds later18:39
portantex-timestamp should be what it was stored with, no?18:40
pelusebeats me :)18:41
peluseI assumed it was the GET18:41
portantethe x-timestamp field in a response header should reflect the x-timestamp stored with the object18:42
*** piyush has joined #openstack-swift18:42
pelusecool, thanks18:42
peluseso no way to know what the time was when the GET was made18:43
peluse?18:43
openstackgerritClay Gerrard proposed a change to openstack/swift: additional functional tests for account acls  https://review.openstack.org/8007318:43
portantepeluse: so the self.object_client.create_object() could check and store the PUT response for the x-timestamp18:44
portanteif "now" is greater than that timestamp, the environment is a bit "off"18:45
*** piyush1 has joined #openstack-swift18:45
pelusetorgomatic:  cool link, thanks18:45
luisbgtorgomatic, nice!18:46
peluseportante:  still don't get WTF this is happening now all of a sudden18:46
portantetiming obeys nobody18:46
*** piyush has quit IRC18:47
luisbgtorgomatic, reading libc's time code is very interesting (strftime), I recommend it18:47
portanteclayg: I have parent/teacher conferences in 20 minutes, when I get back I'll be looking at that acl patch and updating the in-process functional test patch18:47
portantefyi18:47
torgomaticluisbg: thanks; I may do that at some point18:48
luisbgtorgomatic, I would add one more to the list. 35. There is only one clock18:48
torgomaticluisbg: follow the link to more falsehoods; there's another 70+ :)18:49
luisbgtorgomatic, hahahahhaaa18:49
luisbgwell, time is a mess even if you ignore that humans measure it wrong18:49
portantecan you even measure it right?18:50
peluseportante:  actually the logs do show that 2 secs did appear to pass18:50
peluse2014-03-13 00:49:15,682 Request: PUT  then 2014-03-13 00:49:17,771 Request: GET18:50
luisbgportante, no you can't, but you can get closer than our broken calendar/week/day :P18:51
claygohai18:51
luisbgportante, leap, !leap, emperors stealing days from other months, moving numbers to not match (oct-ober is not the eight), daylight savings and the day not being 24 hours long. to least a few18:53
luisbgs/least/list18:53
claygdfg: yeah I changed the commit message - that was the scary part - the Allowed-Methods part18:53
* clayg goes to look if this channel logs somewhere...18:53
clayghttp://eavesdrop.openstack.org/irclogs/%23openstack-swift/%23openstack-swift.2014-03-12.log cira 2014-03-12T02:08:3218:54
claygdfg: ^18:55
luisbgclayg, good to have that url in case my bip loses its lgos18:56
luisbglogs*18:56
luisbg:)18:56
*** changbl has joined #openstack-swift19:02
claygdfg: well... let me know19:05
dfgclayg: it looks fine. just re-reading through the commit msg. its got to be in running for longest commit msg ever19:07
dfgclayg: thx for checking it out19:07
claygk, so you think the allowd-methods vs expose-headers in the commit was just a typo?19:07
notmynamepeluse: hey, guess what! ec merge failed the neutron test again!19:12
pelusealmost afraid to ask - but how easy is it to setup a local envinronment to attempt to reproduce a failure like one seen with test_object_temp_url_negative.py?19:12
pelusenotmyname:  jsut seem really suspicous that this has something to do somehow with the EC branch19:12
dfgclayg: ya that was a mistake-19:13
dfgit should have been expose-headers19:14
notmynamepeluse: well, if your ec patches didn't go and muck with the nw_cache, then we wouldn't have the problem19:14
notmynamepeluse: disclaimer: I have no idea what a nw_cache is19:14
notmynamepeluse: http://logs.openstack.org/95/80095/1/check/check-tempest-dsvm-neutron/bbd5ad4/console.html#_2014-03-13_18_34_15_35119:14
*** Midnightmyth has joined #openstack-swift19:15
notmynameoh, I'm not going to spend any more time on that tempest patch today. if someone wants to push something over it or do another patch, my blessings to you19:16
peluseI'm stuck without whatever it is being fixed19:17
pelusewill keep digging19:17
pelusethat damned nm_info cache :)19:17
peluseor w or whatever :-)19:17
dfgclayg: the other problem with the commit is I make no reference to the people who have cors_allow_origin set in their proxy-server.conf. i tested it and stuff but- anyway. just thought i'd mention it19:22
dfgcommit msg19:22
claygdfg: oh... i didn't think about (know about?) cors_allow_origin - not sure how to test19:23
claygdfg: anyway, it seems to fix a real issue so i'd like to see it merged - maybe get glange to poke at it or something...19:23
claygtest.unit.common.test_utils.TestRateLimitedIterator.test_limit_after fails a lot for me - does that ever hit the gate?19:24
dfgclayg: you just set cors_allow_origin = http://test.com  in the conf and the controller.is_origin_allowed uses it19:25
claygand it over-rides whatever is set on the container, or the container takes precedence?19:25
dfgclayg: (for ratelimiting thing) is that that problem you mentioned a while back?19:25
claygdfg: idk, I can't find a launchpad bug...19:26
*** mlipchuk has quit IRC19:26
dfgclayg: that only ever failed when I ran it on a really crappy VM. you can't get them to buy you a better laptop?19:26
clayglol19:27
openstackgerritpaul luse proposed a change to openstack/swift: Prevent object with storage policy mismatch from being updated in a container  https://review.openstack.org/7973119:29
*** piyush1 has quit IRC19:37
*** wer has joined #openstack-swift19:40
*** piyush has joined #openstack-swift19:44
*** piyush1 has joined #openstack-swift19:46
*** piyush has quit IRC19:48
*** keving2 has joined #openstack-swift19:55
*** keving3 has joined #openstack-swift19:57
*** keving2 has quit IRC19:57
*** keving1 has quit IRC19:58
openstackgerritSamuel Merritt proposed a change to openstack/swift: Check object segment MD5s  https://review.openstack.org/8038320:02
*** shri has quit IRC20:04
*** shri has joined #openstack-swift20:18
claygtorgomatic: can you still do a SLO of SLO's?20:38
claygtorgomatic: I didn't know you could do that "def initialize(self, put_timestamp=None, *_initialize_args):"20:42
claygwow, that's crazy you almost can't pass put_timestamp in as a kwarg unless you also name you var-args?20:46
claygwell... no20:47
claygsigh, I think python3 fixes this20:49
clayg... and world hunger20:49
claygtoo bad you can't use it!  trollololo20:49
openstackgerritAlex Pecoraro proposed a change to openstack/swift: Allow hostname for nodes in Ring  https://review.openstack.org/7454220:55
*** gyee has joined #openstack-swift21:14
*** jokke_ has quit IRC21:17
notmynamepeluse: well, the merge seemed to work in the check queue. not all over again for the gate queue21:49
notmynameclarkb: any word on when the pruned gate job list is going to be implemented?21:50
clarkbno idea, sdague is working on it21:50
pelusenotmyname:  yeah, I saw that but both mine keep getting hit with the same thing over and over.  Almost have devstack and tempest running so I can attempt to repro locally - not sure what elese to do21:58
*** rishi__ has quit IRC21:59
*** piyush1 has quit IRC22:06
*** lpabon has quit IRC22:07
*** fifieldt has joined #openstack-swift22:16
*** changbl has quit IRC22:16
*** foexle has quit IRC22:18
*** peluse has quit IRC22:25
*** Midnightmyth has quit IRC22:31
torgomaticclayg: you used to be able to do either a DLO with SLO segments, or a SLO with DLO segments, depending on your pipeline order... I took that away22:34
torgomaticyou couldn't do that before they moved up into middleware, so the Havana release didn't have it, and no sane client would ever do such a thing22:34
*** jergerber has quit IRC22:34
openstackgerritA change was merged to openstack/swift: DRY out common.constraints a bit more  https://review.openstack.org/7977222:44
*** mkollaro has quit IRC22:46
h6wMorning all.22:46
*** fifieldt has quit IRC22:46
notmynameh6w: good morning22:46
* h6w is still stuck on the self-signed certificates problem. Curl works ok, but cloudfuse throws a CA error. http://pastebin.com/SirDHe3W22:47
h6wI'm thinking of throwing in the towel and buying certs for it instead.22:47
*** bsdkurt has quit IRC22:57
*** bsdkurt has joined #openstack-swift22:57
torgomatich6w: so you use `curl -k` to turn off SSL cert validation, but you don't have anything equivalent for cloudfuse22:59
torgomaticonce you get curl working *without* -k, I bet cloudfuse will start working as well23:00
torgomaticeither that or tell cloudfuse to skip cert validation (if you can; I've never used it)23:02
* h6w *foreslap*23:03
h6wI didn't see the -k.23:03
h6wYeah.  verify_ssl=false is supposed to disable it, but it doesn't do it properly.23:05
torgomaticHave you tried putting the certificate in /etc/ssl/certs/something-or-other/makeitgo.pem? I don't know the exact path (obviously), but there should be a way to add a new trusted CA to a system by dropping its root cert there23:07
torgomaticand I think that you can also drop a self-signed cert in there to trust it23:07
h6wtorgomatic: Yep.  I copied the cert.crt and cert.key and put the cert.crt in /etc/ssl/certs/ and the key in /etc/ssl/private23:08
*** mkollaro has joined #openstack-swift23:08
openstackgerritAlex Pecoraro proposed a change to openstack/swift: Allow hostname for nodes in Ring  https://review.openstack.org/8042123:10
h6wI then tried appending it to /etc/ssl/certs/cacert.pem23:11
h6wIf I specify the cert with --cacert /etc/ssl/certs/cert.crt it works also.23:13
h6wOh, hang on, no it doesn't.  It *almost* works.23:14
h6wThe certificate specifies the machine name where the ssl connection specifies the IP.23:15
torgomaticI've only done it on debian-based distros, but it was something like this: http://askubuntu.com/questions/73287/how-do-i-install-a-root-certificate23:15
torgomaticfor red hat, I've no idea23:15
swifterdarrelltorgomatic: on centos, we do something like    cat $CERTFILE >> /etc/pki/tls/certs/ca-bundle.crt23:15
h6wYeah.  This is Ubuntu 12.04 LTS23:15
swifterdarrelltorgomatic: (jumping in here w/little context) oh, nm23:15
torgomaticswifterdarrell: is there any special craziness after that? On Ubuntu, you have to do some dpkg-reconfigure thing to make some system thingy something something see the cert23:15
swifterdarrelltorgomatic: no, not on cent23:16
h6wI think it may be simpler than that.  I think I have to specify in the cert that it's the cert for the IP, not the cert for the machine name.  brb.23:16
openstackgerritAlex Pecoraro proposed a change to openstack/swift: Allow hostname for nodes in Ring  https://review.openstack.org/8042123:16
swifterdarrelltorgomatic:  on ubuntu you put the cert in the "right place" then run    udo update-ca-certificates -f >/dev/null23:16
swifterdarrell*sudo23:16
torgomaticswifterdarrell: if only it shipped with a modern Python, it'd be perfect :)23:16
swifterdarrelltorgomatic: ubuntu right-place is /usr/local/share/ca-certificates/23:17
*** bada_ has quit IRC23:17
swifterdarrelltorgomatic: and this is a super-fun way to grab the certificate from the webserver itself:   openssl s_client -connect $SERVER_IP:443 </dev/null 2>/dev/null | awk '/-BEGIN CERTIFICATE/,/-END CERTIFICATE/'23:18
swifterdarrelltorgomatic: h6w: okay, that's all I've got23:18
swifterdarrelltorgomatic: h6w: and i'm not even sure if what you were asking was "how do I trust some random cert"23:18
*** jasondotstar has quit IRC23:18
torgomaticswifterdarrell: yeah, he's got a self-signed cert for some Swift install, and cloudfuse's turn-off-ssl-verify switch (apparently) doesn't work23:19
*** bada_ has joined #openstack-swift23:19
swifterdarrelltorgomatic: h6w: I think you're also at the mercy of whatever SSL tool you end up using; there's some system default which openssl (and/or gnutls??) use but any software is free to use some other cert bundle or whatever :-/23:20
swifterdarrelltorgomatic: h6w: iirc, requests has some way to specify the cert bundule and it at least defaults different than distro defaults?  (don't quote me on that, it's a really vague memory)23:20
swifterdarrelltorgomatic: h6w: if curk (no -k) works, you're probably golden... unless you aren't23:21
*** jasondotstar has joined #openstack-swift23:22
h6wswifterdarrell:  It now works if I specify --cacert  So I've just got to work out where that's supposed to be.23:25
h6w/usr/local/share/ca-certificates is empty.  I put it in there as cert.crt or cert.pem but it still doesn't work. :-(23:27
*** Fin1te has joined #openstack-swift23:31
*** changsimon has joined #openstack-swift23:34
*** changsimon has left #openstack-swift23:35
h6wGot it!23:35
h6w1) Put in /usr/share/ca-certificates (note: not /usr/local...)23:35
h6w2) Add the filename to /etc/ca-certificates.conf23:35
h6w3) Run sudo update-ca-certificates23:36
h6wcd23:36
*** changsimon_ has joined #openstack-swift23:36
h6wAwesome! :-)   cloudfuse now working. Thanks people! :-D23:37
*** jasondot_ has joined #openstack-swift23:38
h6wNext question.  I have one swift proxy and 3 storage nodes.   How do I get the status of the nodes?   Specifically, I want to know that the nodes are all in sync and that one hasn't died.23:39
torgomaticswift-recon?23:39
*** changsimon_ has quit IRC23:39
notmynameyup. that's what you want23:40
*** mkerrin1 has joined #openstack-swift23:40
h6wThanks.  What should I be seeing?  I just get "---> Starting reconnaissance on 3 hosts"23:40
*** jasondotstar has quit IRC23:41
*** CrackerJackMack has quit IRC23:44
notmynameh6w: `swift-recon --all`23:44
*** bada_ has quit IRC23:45
*** mkerrin has quit IRC23:45
*** bada_ has joined #openstack-swift23:46
h6wbingo23:46
*** CrackerJackMack has joined #openstack-swift23:49
*** miurahr has quit IRC23:54

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!